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This  report  is  a  collection  of  the  failure  regions  for  the  known  faults  in  a  collection  of 
implementations  of  a  combat  simulation  program.  A  failure  region  is  the  set  of  all  possible 
program  inputs  that  will  execute  a  specific  fault  and  produce  a  result  that  varies  from  the 
specified  or  expected  result.  A  fault  is  an  erroneous  (possibly  non-contiguous)  section  of 
program  source  code.  The  purpose  of  this  report  is  to  document  a  set  of  failure  regions 
corresponding  to  the  known  faults  in  a  set  of  redundant  program  versions. 

Each  failure  regions  is  characterized  in  two  ways:  by  identifying  the  fault  that  it  reveals 
and  by  identifying  the  boolean  conditions  sufficient  to  consider  a  program  input  to  be  a 
member  of  the  failure  region.  These  boolean  conditions  are  divided  into  three  parts.  Those 
labelled  "Condition  I"  are  the  conditions  that  cause  an  input  to  execute  the  fault.  Those 
labelled  "Condition  II"  are  the  conditions  that  cause  the  execution  of  the  fault  to  produce 
an  erroneous  internal  state.  Those  labelled  "Condition  III1'  are  the  conditions  that  cause 
that  erroneous  internal  state  to  be  propagated  to  become  part  of  a  result.  The  process  of 
determining  these  conditions  is  dealt  with  at  length  in  a  recent  Master's  Thesis[l]. 

There  have  been  two  simplifications  made  in  the  course  of  deriving  the  failure  regions 
in  this  report.  First,  all  uninitialized  variables  are  assumed  to  have  erroneous  values.  This 
simplification  is  made  to  avoid  machine-dependent  probablistic  modeling  of  the  conditions 
under  which  a  coincidentally  correct  value  may  be  found  in  an  unitialized  variable.  Second, 
the  effects  that  one  failure  region  has  on  another  have  been  neglected  here.  During  the 
analysis  process,  each  fault  is  considered  in  isolation  of  all  other  known  faults  in  the  code. 

The  failure  regions  in  this  report  are  for  the  known  faults  in  eight  implementations 
of  CONFLICT,  a  simplified  nonprobablistic  combat  simulation,  that  were  developed  in  the 
course  of  a  software  experiment [2].  It  is  assumed  that  the  reader  is  very  familiar  with  the 
CONFLICT  Specification [3].  All  of  the  failure  regions  that  follow  arise  from  violations  of 
that  specification  and  all  of  the  variables  and  many  of  the  conditions  described  below  are 
abstracted  from  the  specification  or  from  the  implementations  of  that  specification. 

The  regions  in  this  report  are  profiled  and  analyzed  in  an  accompanying  document [4]. 
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Notation 

In  the  descriptions  that  follow,  the  following  conventions  are  used: 

•  So  far  as  is  possible,  the  conventions  of  the  specification  have  been  preserved. 

•  Text  appearing  in  italics  (e.g.  ''Endurance'1)  are  defined  within  the  scope  of  this 
document,  either  globally  or  for  a  specific  failure  region. 

•  Text  appearing  in  roman  type  (e.g.  ' Army []. Endurance')  are  program  variables  for 
the  implementations  containg  the  fault.  The  only  exception  to  this  is  the  variable 
'Mainloop',  which  is  used  to  indicate  the  current  simulation  cycle,  but  may  not 
appear  in  a  specific  version  under  that  name.  'Mainloop'  is  normally  defined  within 
the  Active  predicate,  implicitly  existentially  quantified. 

•  Due  to  the  fact  that  program  variables  are  more  than  one  character  in  length,  all 
multiplication  is  shown  explicitly  with  the  multiplication  symbol  x. 

•  Due  to  the  length  of  the  formulae  below,  it  is  necessary  to  break  formulae  across 
more  than  one  line.  There  are  no  matrix  or  vector  operations  appearing  in  this  doc- 
ument, and  parentheses  are  used  strictly  to  delimit  portions  of  formulae  to  improve 
readability  or  to  indicate  precedence  of  operations. 

•  All  definitions  within  'Condition  I'  of  a  failure  region  are  assumed  to  extend  over 
'Condition  II'  and  'Condition  IIP  of  that  failure  region  unless  use  of  parentheses  in- 
dicates otherwise.  All  definitions  within  'Condition  IF  of  a  failure  region  are  similarly 
assumed  to  extend  over  'Condition  III'  of  that  failure  region. 

•  The  diacritical  marks  '  and  "  are  used  strictly  to  distinguish  between  variables  of 
similar  name  and  role  in  a  given  failure  region. 


Time-Dependent  Definitions 

Endurance  of  Squadron  (B,  g,  j)  at  time  t: 

Endurance(B,g,j,t)  =Army[f?,  g].  Endurance^']— 

A  r  my  [£?,#].  Wear  [j]  x  t  — 

Damage(B,g,j,t  —  1)  +  Repair(B,g,j,t  —  1) 

Weapon  Damage  of  Squadron(i?,£j)  up  to  and  including  time  t: 

(0 


if  t<\ 


Damage(B,g,j,t)  =  < 


Damage(B,g,j,t  —  1)  +  otherwise 

NArmy[->B]    /Params.NumWTypes    /Army[->S,e].Weapon[tu].Num Weapon 

E  E  E 

e=l  \  xv-\  \  t'=l 

^Army[->i?,  e]  AVeaponfu.']. Damage  x  \  \  \ 

Armv[->£?,  g].WeapSensativity[u>]x 

7 


max 


0,1- 


(vb^A1  ~ !)  -  ay^B,e,wAt  -  !))2 


Army  [->.B,e].Weapon[u>].  Radius 


I  V       V 

Whether  or  not  Squadron(i?,<7,j)  is  a  casualty  at  time  2: 

Casualty(B,g,j,t)  =  (Endurance(B,g,j,t  —  1)  >  0)A 

(Endurance(B,g,j,t  —  1)     <^   A   c\ 
Army[£,p]. Endurance^]    —      '    / 

Repair  applied  to  Squadron(5,<7,j)  up  to  and  including  time  t: 

(0 


J  J  J  J 


Repair(B,g,j,t)  =  < 


if  t  <  1 


Repa7r(B,g,j,t  -  1) 


if  (/  >  1)A 
■<Casualty(B,g,j,t  —  1) 


Repair(B,g,j,t  —  1)+  otherwise 

m\n(Suppl(B,g,t  —  l)/NumCas(B,g,t), 

FixRate(B,g,t-  l)/NumCas(B,g,t), 

(Army  [5,  p]. Endurance^'] 

—  Endurance(B,g,j,t  —  1) 

-Repair(B,g,j,t  -  1) 
k  +Repair(B,g,j,t-2))) 


Number  of  Casualties  in  Battalion  B,  g  at  time  t: 

Army[B,g]. Squadrons  f  1   if  C aSUalty(B ,  g ,  j ,t  —  1) 

0  otherwise 


NumCas(B,g,  r)  = 


E 


Rate  of  Repair  available  to  any  squadron  of  battalion  B,  g  at  time  t: 
FixRate(B,g,t)  =  Army[£,#].FixRate  x  NumFix(B,g,t  -  1) 
Number  of  Squadrons  in  battalion  B,  g  dedicated  to  repair  other  squadrons  at  time  t: 


Army  [B  ,5]  .Squadrons 

£ 

NumFix(B,g,t)  =  Army[5,^].NumFixers  x  


0  if  ->Casualty(B,g,j,t) 

1  otherwise 


Army  [B,  g].  Squadrons 
Amount  of  supplies  available  in  battalion  B,  g  at  time  t: 

Army  [B  ,g]  .Squadrons 

Suppl(B,g,t)  =  Army[i?,  #].FixSuppl  —  ^  Repair(B,g,j,t  —  1) 

i=i 

X  Location  of  Battalion  B,  g  at  time  t: 

xB,g(t)=ATmy[B,g].X+ 

t 

J2(V(B,g,d)  x  cos(Army[5,y].Theta) 

~\TM(B,9lxBig(d-l),yBtg(d-l),V(B,g,d-\)) 
xWM{B,g,xB,9(d-l),yBtg(d-l),d)) 

Y  Location  of  Battalion  B,  g  at  time  t: 

yBJt)=Army[B,g}.Y+ 
t 

J2(V(B,g,d)  x  sin(Army[B,p].Theta) 


d=\ 


xTM(B,g,xBy9(d  -  l),yB,g(d  -  l),V(B,g,d  -  1)) 
xWM(B,g,xBig(d-l),yBtg(d-l),d)) 


Velocity  of  Battalion  B,  g  at  time  t: 


Army[B ,5].Squadrons  ( qq  if  Endurance(B , g ,  j ,t  —  l)<  0 

\Army[5,^].V0[j]  x  Amy[fiig]ind^anc<^  otherw,se 


j=i 


Terrain  effect  on  Movement  of  Battalion  B,  g  at  location  x,  y  moving  at  velocity  v: 

Let  x'  and  y'  represent  the  end  of  the  possible  movement,  p,  q  be  the  Terrain  grid  location 

of  x,y: 

x'  =  x  +  v  x  cos(Army[£,  gj.Theta) 
y'  =  y  +  v  x  sin(Army[jE?, #].Theta) 


p(x)  =  [ 
Q(y)  =  [ 


Par  ams.X  Delta 


Params.YDelta 


TM(B,g,x,y,v)  = 


if  v  =  0 

/       Armv[B,g].MaxSlope-  MtM''Wv'l-''V.)-Mt<l*')-'tv)-'*1>  \ 


max    0, 


Army[fi,s].MaxSiope 


otherwise 


Weather  effect  on  Movement  of  Battalion  B,  g  at  location  x,  y  at  time  t: 
Let  (WXi,  WY{)  be  the  center  location  of  storm  i  at  time  t: 


'  Weather [»].WX0  if  t  <  Weather^']. TStart  V  t  >  Weather [ij.TEnd 


WXi  = 


WYi 


Weather [?].WX0  +  {t  -  Weather^']. TStart)  x  Weather^']. dWX  otherwise 
' Weather [i].WY0  if  /  <  Weather [i]. TStart  V  t  >  Weather [?].TEnd 
l Weather [i].WY0  +  (t  -  Weather[i]. TStart)  x  Weather [t'J.dWY  otherwise 
Let  W  be  the  total  effect  of  storms  on  location  (x,  y)  at  time  t: 

(0  iit<  Weather  [?']. TStart  V  t  >  Weather[?].TEnd 


Params.NumWEvents 

W(x,y,t)  =  £ 


i=i 


Weather[i].\VRadius--v/(T-UA',)2  +  (j/-U-r,; 


max  I  0,  Weather[i] . W Radius 

\     Weather  [fj.WSeverity 


otherwise 


fl 


if  W(x,y,t)  =  0 


WM(B,g,x,yJ)=  { 


Army[B,^].MWEffectx 

H"(r,y,<)  — Params  WMaxSeverityx Params.NumWEvents 
Par  ams.WMaxSeverityx  Params.NumWEvents 


otherwise 


Weather  effect  on  Observation  at  location  (x,y)  at  time  t: 

'0 


WO(x,y,t)  = 


W(x,y,t)  —  Params.WMaxSeverityxParams.NumWEvents 
Params.VVMaxSeverityxParams.NumWEvents 


\iW(x,y,t)  =  0 
otherwise 


(X,Y)  Location  of  Squadron  B,  g,  j  at  time  t: 

Let  s  be  the  number  of  Squadrons  in  Battalion  B,  g  prior  to  squadron  j  that  have  positive 

endurance  at  time  t: 

,_        ...       i^  I  0  if  Endurance(B,g,  i,t  —  1)  <  0 
*B,g,j,t)-'E{i  otherwise 

'  xB,g{i  —  1)  +  Army[i?,#].SquadSepx 
{s(B,9j,t)  -  [aJ^'gLwJ  x  Army[B,^].GRow)  - 

Army[fl,g],GRowx  Army[B,g].SquadSep 
2 

if  s(B,  g,  Army [5, 5]. Squadron  +  1,0  -  s(B,g,j,t)  > 

Army[5,#].GRow 

xB,g{i  —  1)  +  Army[i?,  gj.SquadSepx 
{s(B,g,jtt)  -  U^^kowJ  ^  Army[B)5].GRow)  - 

5(g,p,Army[B,3].Squadron+l,0-[^^74f^uR^ 


^B,5,j(0   =    < 


x  Army[£,g].SquadSep 


otherwise 


VB,9M  =VB,At  -  1)  +  Army[B,9].RowSep  x   [AJ^fcLw] 

-0.5  x  [ii^^^&^tlilj  x  Army[B,ff].RowSep 


Squadron  B,  g,  j  observes  squadron  ->B,  e,  k  at  time  t: 


Observe(B,g,j,  e,k,t)  =  BigEnough(B,g,j,e,k,t)  A  Clear(B,g,j,e,k,t) 

AObvious(B1  g,j,  e,  k,t) 

Squadron  ->.£?,  e,  k  is  large  enough  to  be  seen  at  the  distance  from  squadron  B,  g,  j  at 
time  t: 

BigEnough(B,  g,  j,  e,  k,  t)  = 

xgj  =  XB,g,j(t  -  1)  A  ygj  =  yB,5J(*  ~  !)A 
xek  =  x^B<etk(i  -  1)  A  yek  =  y^B,e,k{t  -  1)A 
(maxjtan-^^-tan-^^) 
(x',y'),{x",y")  6  {{xek±  Army[-i£,e].SquadWidth/2, 
yek  ±  Army[->i?,  e].SquadLength/2)} 
>  Army[jB,y].ObsMinAngle[j]) 

No  terrain  blocks  the  view  of  squadron  -iJ9,  e,  A:  from  the  position  of  squadron  B,  g,  j  at 
time  t: 

Clear(B,g,j,e,k,t)  = 

xgj  =  XB,9,j{t  -  1)  A  ygj  =  yB.gji1  ~  *)A 
xek  -  a:-,B,c,fc(<  -  1)  A  yek  =  y^B,e,k(t  ~  l)A 

{Va,a  ,C,C  ,Z,Z  ,d  =    [Params.XDeltaJ    A  a     ~    [.Params.XDelta 


A 


c  = 


yg(.ni(    I  Ac'  = 

tis.  Y  DeltaJ 


yefc 


Params.YDelta 


A 


z  =  Alt(a,  c,  xgj.  ygj)  A  z'  —  Alt  (a1,  c',  ze/:,  yek)A 
(V?7,l  <  n  <  Params.SampleRate  —  1, 

(3r    V    a    r  =    2 _    I  rgj  +  rx(refc-fgj)  I 

H'ti')?)'  Params.SampleRate- 1  ">  V  [     Params.XDelta    J  '  ** 


ygj  +  rx(yek-ygj) 
Params  YDelta 


{z  +  r  x  (*'-  2))  >  Alt{p,q,xgj  +  r  X  {xek  -  xgj), ygj  +  r  x  (yek  -  ygj)) 


)    )        ) 


Squadron  -*B,  e,  k  differs  enough  from  its  background  to  be  discerned  by  squadron  B,  g, 
j  at  time  t: 

Obvious(B,g,j,  e,  k,t)  = 

xgj  =  aJB,5,i(<  -  1)  A  ygj  =  yB,g,j{i  -  1)A 

xek  =  x-,B,e<k{t  -  1)  A  yek  =  y^B,e,k{t  ~  !)A 


/  /57(a',c',xe/c,yefe)-Army[-^B,e].SquadIntensity(A-] 


B I  (a1, c', xek, yek) 
Params.SampleRate 

E((WO  (xai   X         "X(refc-xgj) ■  nx(vefc-ygj)  MainloOD^   X 

\\  \  Paxams.SampleFtate'  "  "•'  Params.SampleRate'  *) 


n=l 


Army[J5,^].VWEfFect)+ 


NArmv[->5] 

E 

e'  =  l 


0    if 


(^fl,„(MainlooP  -  1)  -  xgj  x  pjffffSL.)  + 
^  (^.(Mainloop  -  1)  -  ygj  x  ^*^ri)! 
>  Army[->J5,  e'j.ObsJamRadius 


(x^(Mainloop  -  1)  -  xgj  x  ,JS££SL^  + 
\|  (y,B,«.(Mainloop  -  1)  -  ygj  x  P„"^^L,.) 


Anny[-<B,e/].Obs  Jam  Radius 

x  Army[->5,  e'j.ObsJamEff  otherwise 

))  <Army[5, #].ObsMinContrast[j]) 

Squadron  ->i?,  e,  k  is  in  range  of  the  weapons  of  battalion  B,  g  at  time  t: 

InRange(B,g,  e,  k,t)  = 

xek  =  x^B,e,k(t  -  1)  A  yek  =  y-,B,e,k{t  -  1)A 

sj{xek-  xBt9(t  -  l))2  +  (yefc  -  j/b)P(<  -  l))2  <  Army[i?,#].Weapon[z]. Range 

Number  of  Squadrons  in  battalion  5,  g  dedicated  to  processing  messages  at  time  t: 

at        r>  ,n       .        .         r„     ,  XT       ~  NumCas(B,g,t) 

A  umProcess(B , g,t)  =  Army^gJ.Numrrocess  x — — — ; — - — 

Army  [±5,(7].  Squadrons 

Number  of  Squadrons  in  battalion  B,  g  dedicated  to  receiving  messages  at  time  t: 

at  n       /  j->  ±\  a  rn       1   at  t^  •  N  UlTlC  Cts(B ,  g  ,i) 

NumRec{B,g,t)  =  Army  £,p  .NumReceive  x ,_     =  '         , — 

Army[ij,  g\.  Squadrons 

Number  of  Squadrons  in  battalion  B,  g  dedicated  to  communications  jamming  at  time  r: 

AT  T  ^    T">  .N  m  1     AT  ^ UTTlC CI  s(  B ,    O ,   t) 

l\umJarn{B,g,t)  =  Arm)r[#, gJ.NumJammers  x — — — -, ■ 

Army[i?,  g\.  Squadrons 

Number  of  Squadrons  in  battalion  B,  g  dedicated  to  sending  communications  at  time  t: 

at       n      »/ t->       ,\        a         m     i  at       o      i  NumCas(B,g,t) 

NumSend(B,g,t)  =  Armv [B,g  .NumSend  x =  -     =  ;    '    , — 

Army  [B,g\.  Squadrons 

Number  of  functional  weapons  of  type  i  in  battalion  B,  g  at  time  t: 


Arum\\reapon(B,g,i,t)  =  Army[i?,  <7].Weapon[?].NumWeapon  x 


NumCas(B,g,t) 
Army[i?,  <7J. Squadrons 


Target  coordinates  for  weapon  i  of  type  w  in  Battalion  J5,  g  at  time  t: 

QXB,g,w,i{t)  —  x-<B,e,k  ^ 

[  \J2  E  N*>  e  ]-Squadrons  |Q  ^^ 

/ti  fl  if  3j,Observe(B,g,j,e,k',t-l)\\  = 
\jT?.  \0  otherwise  J  J 

I  ^2  NumWeapon(B,g,w',t) )  +  i  -  1 
W=i  / 

ayB.g.wA*)  =  y^B,e,k  ^ 

(^  ^E   E  H*i  e  l-Squadrons  |Q  otherwise 

|  /ti   fl  if  3j,06sen;e(£,^,e,^t-l)\\  = 
V^til0  otherwise  yy  " 

(y^  Num]\'eapon(B,g,w',t)  J  +  z  —  1 

Command  Message  m  Implemented  in  Battalion  B,  g  before  time  t: 

Mimp(B,g,m,t)  = 

((Cmsgs[i?,™].Time  +  Army[5,5-].MediaDelay 
-\-RecDelay(B,g,  RecT(B,  g,  m))  -f  QueDelay(B,g,m) 
+  Army[5,#].ProcDelay)  <  t)A 
(Cmsgs[j9,  /Tij.Dest  =  g) 

Delay  due  to  message  receipt  at  battalion  B,  g  at  time  t: 

{oo  if  NumRec(B,g,t)  -  ComJam(B, g,t)  <  0 
ArmvfB.pl.RecRate  ,1 

T, — p    IB    t\   n 5 — ra — 7\  otherwise 
I\umHec(B,g,t)  —  Com  Jam(B,g4) 

Number  of  jammed  receivers  in  battalion  B,  g  at  time  t: 
ComJam(B,g,t)  = 

NArmy[-iB] 

y]      mm(Num  Jam(^B,  e,  i*),  Army[-'5,  e].CommJamPriority[g])  x 

e=l 

Army[-i5,  ej.CommJamEfTx 

y    '  Army[-ifl,e).CommJamRadius  J 

Delay  due  to  message  queuing  of  command  message  m  in  Battalion  B,  g: 


Duration 

QueDelay(B,g.m)  =         )T         < 

t  =  RecT(B,g,m) 


'1  if  CmdSum(B,g,  m,t)  -f  ReptSum(B,g,  m,t) 
>  NumProcess(B,g,t  —  1) 


,0  otherwise 


Time  command  message  m  is  received  at  battalion  B,  g: 

RecT(B,g,m)  =  Cmsgs[B,  m). Time  +  Army [£,#]. MediaDelay 

Time  delay  for  report  message  from  battalion  B,  f  to  be  transmitted  to  battalion  B,  g: 
RepT(B,gJ)  =  Army[5,/].SendRate  +  Army[J5,^].MediaDelay 

Number  of  command  messages,  other  than  m  being  processed  by  battalion  B,  g  at  time  t: 


NCmsgs[S] 

CmdSum(B,g,m,t)  =       jP       < 

n=l 


'0  if  (m  =  n)  V  (Cmsgs[£,  nj.Dest  ^  g)W 
(t  <  RecT{B,g,n)A 

Cmsgs[£,m]. Priority  >  Cmsgs[i?,  n]. Priority) 
V(Cmsgs[£,n].Time  >  *)V 
(RecT(B,g,n)  +  Army^^j.ProcDelay  <  t) 


1  otherwise 

Some  opposing  squadron  exists  and  is  observed  by  a  squadron  of  5,  g,  at  time  t: 

SomeObserve(B,g,t)  = 

(3e,  1  <  e  <  Narmy[-iB],  Army[->.£?,  e]. Squadrons  >  0  A  EObserve(B,g,  e,t)) 

Some  opposing  squadron  in  battalion  ->£,  e,  exists  and  is  observed  by  some  squadron 
of  B.  g  at  time  t. 

EObserve(B,g,  e,  t)  = 

(3A\  1  <  k  <  Army[->5,  ej. Squadrons,  Endurance(-*B,  e,  k,  t)  >  0A 

(3j,  1  <  j  <  Army[£?,  /]. Squadrons, 

Endurance(B,  /,  j,  t)  >  0  A  Observe(B,g,j,  e,  k,t))) 

Number  of  report  messages  being  processed  by  battalion  B,  g  at  time  t,  while  message  m 
may  be  queued: 

'0  if  (Army [5,/]. Report  ^  #)V 

{W,t-  RepT(B,g,f)  -  Army[£,#].ProcDelay 

<t'<t-RepT(B,gJ), 
^SomeObserve{B,  f,  t'))\/ 
(So7neObserve(B ,  f,t  —  RepT(B,  g,  /)  A 
Army [5, /]. Priority  <  Cmsgs[i?,  m). Priority) 

1  otherwise 


NArmy[B] 

ReptSum(B,g,m,t)  =      Y^      < 
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Global  Definitions 

Battalion  B,  g  is  active: 

Active(B,g)  ^((Duration  >  0)  A  (Mainloop  6  {O...Duration})A 
(B  e  {TRUE,  FALSE})  A  (NArmy[J9]  >  0)A 
{g  G  {l...NArmy[£]})  A  (Army[£,#]. Squadrons  >  0)A 
(3f,  1  <  i  <  Army[f?,<7J. Squadrons, 
Endurance(B,g,i,  Mainloop)  >  0)) 

Altitude  at  position  (x,y)  in  Terrain  grid  (p,  q): 

(Terrain [p,  q]        —  Terrain [p  +  1,  q\—  \ 

Terrain[p,  q  +  1]+Terrain[p  +  1 yg  +  1]    x  x  x  y  j  + 
Params.XDelta  x  Params.YDelta  / 

(<?(Terrain[p,  <?  -f  1]    —  Terrain[p  +  1,<7 -(- 1])  —  \ 

(q  -f  l)(Terrain[p,  g]— Terrain[p  +  l,q])  XxM" 

Params.XDelta  ' 

(p(Terrain[p  +  1,  g]    —  Terrain[p  +  1,  q  +  1])—  \ 

(p  +  l)(Terrain[p,  g]— Terrain[p,  9  -f  1])  x  2/  I  + 

Params.YDelta  ' 

(p  -f  1)((<7  +  l)Terrain[p,  q]  —  gTerrain[p,  9  +  1])  — 
p((q  -f  l)Terrain[p  +  1,  <?]  —  ^Terrain[p  +  1,<7  4-  1]) 

Background  Intensity  at  position  {x,y)  in  Terrain  grid  (p,  9): 


BI(p.q,x,y)  = 


f  Terrain  [p,  g  +  1]  —  Terrain [p,  9]  +  \ 

Terrain [p  +  1,  9  +  1]  —  Terrain [p  ■+  1,  q]  j    -f 

V  2(Params.XDelta)  / 

^Terrain[p  +  1,  q  4-  1]  —  Terrain[p,  q  +  1]  +  ^ 
Terrain [p  +  1,  q]  —  Terrain[p,  <j] 


\  V  2(Params.YDelta) 

x  Params.ISlopeFactor+ 

Params.IAltFactorParamspIMeantM~j4/l(if'9'T'v)  + 

Params.IMeanAlt 

Params.IX  x  x  +  Params.IY  xj/  +  Params.IC 
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Failure  Regions  in  Version  1 

1.1:    Incorrect   handling  of  NumCas  when  Army.Squadrons=0 
initially 

Condition  I: 

Duration  >  0  A  {3B,B  £  {true,  false},  NArmy[£]  >  0 
Condition  II: 

(3#,  1  <  g  <  NArmy[5],  Army [B,g]. Squadrons  =  0)) 
Condition  III:True 

1.2:    Update  always  implements  commands  ready  at  the  same 
time  in  CMsgs  array  order 
Condition  I: 

Active(B,g)f\ 

(3m,  n,l  <  m  <  NCmsgs[5],l  <  n  <  NCmsgs[5],m  <  nA 

Mimp(B,  g,  m,  Mainloop)  A  -<Mimp(B,g,  m,  Mainloop  —  1)A 

Mimp(B,  g,  n,  Mainloop)  A  ->Mimp(B,g,  n,  Mainloop  —  1) 

Condition  II: 

Cmsgs[i?,  m]. Priority  <  Cmsgs[B,n]. Priority  A  Cmsgs[B,  772]. msg  7^  Cmsgs[i?,m].msg 
Condition  III: 

(fih  1  <  i  <  NCmsgs[J5],  i  /mAt^nA 

Mimp(B,g,  i,  Duration)  A  ->Mimp(B,g,  i,  Mainloop  —  1))) 

1.3:   Over-restrictive  check:  positive  dWX 

Condition  LParams.NumWEvents  >  0 
Condition  II: 

3i,l  <  i  <  Params.NumWEvents,Weather[i].dWX  <  0 
Condition  IILTrue 
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1.4:  Over-restrictive  check:  positive  dWY 

Condition  LParams.NumWEvents  >  0 
Condition  II: 

3?,1  <  i  <  Params.NumWEvents,Weather[2'].dWY  <  0 

Condition  III:True 

1.5:  Garbage  value  in  FixSuppl  when  Fix  Supplies  exhaused 
Condition  I: 

Active(B,g)A 

(3j,l  <j<  Army[5,  g]. Squadrons,  Casualty(B,g,j,  Mainloop)) 

Condition  II: 

'  Army  [B,g].  Squadrons  \ 

y^  Repair(B,g,  i,  Mainloop)  J  >  Army [B,g]. FixSuppl 

,=i  J 

Condition  III: 

(/3?,1  <  i  <  NCmsgs[f?],  Mimp(B,g,i,  Duration)  A  -*Mimp(B,g,i,  Mainloop  —  1)) 

1.6:   Spurious  input  check  requiring  IAF  >  0 

Condition  LTrue 

Condition  ILParams.IAltFactor  <  0 

Condition  IILTrue 

1.7:  Spurious  Input  check  requiring  NumWEvents  >  0 

Condition  LTrue 

Condition  ILParams. NumWEvents  <  0 

Condition  IILTrue 
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1.8:  Negative  NW  value 

Condition  I: 

3B ,g,  e,t,  Active(B ,  g)  A  Active(^B,e)  A  1  <  t  <  MainloopA 

(3j,  k,  1  <  k  <  Army[->5,e]. Squadrons  A  1  <  j  <  Army[i?,  gj.SquadronsA 
Endurance(B,  g,j,t)  >  0  A  Endurance(->B ,  e,  k,  t)  >  0  A  Observe(B,  g,  j,  e,  k,t))A 
Params.NumWTypes  >  1 

Condition  II: 

3i,  1  <  i  <  Params.NumWTypes,  Army[i?,  <7J.WeapPriority[e,  z]  <  OV 

NumW eapon(B ,  g,  i,  Mainloop) 

<  (NumWeapon(B,g,  i,  Mainloop  —  1)  —  NumWeapon(B,  g,  i,  Mainloop)  + 


Mainloop  NArmv[->S] 

£      £ 


n  =  l 


e'  =  l 


/^min(|  {k'  B  3j,0bserve(B,g,j,e',k',n  -  1)}  |,N 

Army[Z?,  <7].WeapPriority[e',  i], 

N umW eapon(B ,  g,  z,  n))y 

Num  Weapon(B,  g ,  »,  Mai  nloop— 1) 


\ 


J/ 


Condition  III: 


(/9m,  1  <  m  <  NCmsgs[£?],  Mimp(B,g,m,  Duration)  A  -iMimp(B,g,  m,  Mainloop  —  1))A 
(,9777,1  <  m  <  NCmsgs[-i/3],  Mimp(-*B,  e,  m,  Duration)A 
-iMimp(-<B,  e,  m,  Mainloop  —  1)) 


1.9:  PSentListLoc  sends  out  of  range  squadron  to  SquadAlive 

Condition  I: 

Active(B,  g)  A  Active(-*B,  e)  A  Active(B,  f)  A  Army[i?,  /]. Report  =  g/\ 

(3t,l  <  *  <  Duration, 

/  =  Mainloop  —  RepT(B,  f,g)  —  Army[i?,  gj.ProcDelay 


Army[fi,g].RecRate 


-A 


Num  Rec(B ,  g,  Mai  nloop—  Army  [B,p].ProcDelay ' 

(3k,  1  <  k  <  Army[-«5,  e]. Squadrons,  (3j,  1  <  j  <  Army[i?,  /]. Squadrons, 
Observe(B,  /,  j,  e,  k,  t)  A  Endurance(->B ,  e,  fc,  2)  >  0)) 

Condition  II: 

(3m,  1  <  m  <  NCmsgs[->jB],  (->Mimp(-<B,  e,  m,  t))  A  Mimp(-^B,  e,  m,  Mainloop)A 
Army[->.B,  e]. Squadrons  >  Cmsgs[-ii?,m].msg.Squadrons)) 

Condition  III:True 
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1.10:   Restriction  that  SquadIntensity>0 
Condition  I: 

(  3B,B  €  {true,  false},  N  Army  [J?]  >  OA 
(3g,g  G  {l...NArmy[B]},Army[B, ^.Squadrons  >  0 
A(3j,j  E  {1.. Army [B,g]. Squadrons}, 

Condition  II: 

Army[f?,<7].SquadIntensity[j]  <  0))) 

Condition  III:True 

1.11:  Restriction  that  FixSuppl  >  0 
Condition  I: 

(  3B,B  €  {true,  false},  NArmy[£]  >  OA 
(3£,#  G  {L..NArmy[£]},Army[i?,£]. Squadrons  >  0 

Condition  II: 

Army[£, g). FixSuppl  <  0)) 
Condition  IILTrue 

1.12:   Segmentation  fault  when  squadron  leaves  Terrain  grid 

Condition  I:Active(B1g) 
Condition  II: 

(3j,l  <  j  <  Army[B,  g].  Squadrons,  Endurance(B,g,j,  Mainloop)  >  OA 

(Arfii5ij(Mainloop)  <  0  V  Xb,9>3 (Mainloop)  >  Params.XDelta  x  MaxTerrainV 
Ve,^  (Mainloop)  <  0  V  y#i5J  (Mainloop)  >  Params.YDelta  x  MaxTerrain)) 

Condition  III:True 

1.13:  Weapon  use  functions  misordered 

Condition  I: 

3j5,  g,  e,  Active(B,  g)  A  Active(->B,  e)  A 

(3k,  1  <k<  Army[->.£?,  e]. Squadrons,  Endurance(-<B,  e,  k,  Mainloop)  >  OA 

(3j,  1  <  j  <  Army[5,  g). Squadrons,  Observe(B,g,j,  e,  k,  Mainloop  —  1))) 

Condition  ILTrue 
Condition  III: 

{k'  |  (3j,Observe(B,gJ,e,  k',  Mainloop))} 

^  {A-"  |  (3j,  Observe(B,g,j,e,k",  Mainloop  -  1))}A 

(3_7, 1  <  j  <  Army[£?,  g). Squadrons,  Endurance(B,  g,j,  Duration)  >  0)A 

(3k,  1  <  k  <  Army[->5,  e]. Squadrons,  Endurance(-<B,  e,  k,  Duration)  >  0) 
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1.14:   Observation  list  reversed,  causes  error  in  firing 

and 

1.15:    Unneccesary  addition  of  one  to  target   list   subscript  in 
arguments  to  SetLLCoords 

and 

1.16:    Unneccesary  adding  of  one  to  weapon  subscript  in  argu- 
ments to  SetLLCoords 

and 

1.26:  Improper  targeting  due  to  misordered  observation  list 
Condition  I: 

Active(B,  g)  A  Active(->B ,  e)A 

(3k,  1  <  k  <  Army[-'B,  e). Squadrons,  Endurance(-^B,  e,  k,  Duration)  >  OA 
(3j,  1  <  j  <  Avmy{B, g\. Squadrons,  Endurance(B, g,j,  Mainloop)  >  OA 
Observe(B,g,  j,  e,  k,  Mainloop  —  1)))  A  Params.NumWTypes  >  1 

Condition  II: 

(3k',  1  <  k'  <  Army [-'B,  e]. Squadrons,  Endurance(-^B ,  e,  k',  Mainloop  —  1)  >  OA 

(3j,  Observe(B,  g,  j,  e,  k',  Mainloop  —  1))A 

(^-s,e,fc'(^ainloop)  ^  x-^e^Mainloop)  V  ^^^/(Mainloop)  ^  y-,5ieiJt(Mainloop))) 

Condition  III: 

|  {k  3  (3j,0bserve(B,g,j.e,k,Ma.m\oop))}  |> 

min(Army[i?,5f].WeapPriority[e,  1],  N um\V eapon(B , g ,  1,  Mainloop))A 
(Army[5,^].Weapon[l]. Damage  ^  Army[5,^].Weapon[2].DamageV 
Army[-i5,  e].WeapSensativity[l]  ^  Army[->B,  e].WeapSensativity[2])A 
(JBm,l  <  m  <  NCmsgs[-iJ3], 
Mimp(->B,  e,m,  Duration)  A  ->Mimp(->B,  e,m,  Mainloop)) 
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1.17:  Accepts  Army.Squadrons=0  as  valid  data 
Condition  I: 

(3B,B  e  {true,  false},  NArmy[£]  >  0 

Condition  II: Army[5,^]. Squadrons  =  0) 
Condition  IILTrue 

1.18:    TerrMoveTM  returns  unstable  value  if  battalion  leaves 
terrain  grid 

Condition  I:Active(B,g) 
Condition  II: 

(A'S)5  (Mainloop)  <  0  V  A'S)5(  Main  loop)  >  Params.XDelta  x  Max  Terrain  V 
Y^  (Mainloop)  <  0  V  >£i5(Mainloop)  >  Params.YDelta  x  MaxTerrain) 

Condition  III: 

Duration  >  MainloopA 

(/3'M  <  i  <  NCmsgs[B],7l/?'mp(J5,5f,  z,  Duration)  A  -<M?mp(5,#,  ?',  Mainloop  —  1)) 


1.19:   NumCas  not  cleared  by  command  message 
Condition  I: 

Active(B,g)A 

(32, 1  <  i  <  'KCmsgs[B],Mimp(B,  g,i,  Ma\n\oop)  A  ->Mimp(B,g,  i,  Mainloop  —  1)) 

Condition  II: 

3j,  1  <j<  Army [J3,<7J. Squadrons,  Casualty (B, g,j,  Mainloop) 

Condition  III: True 
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1.20:   NW>0  when  KF<0 

Condition  I: 

Acttve(B,g)  A  NArmy[->£]  >  0  A  Params.NumWTypes  >  OA 
(3z,      1  <  % :  <  Params.NumWTypes, 

(   Army[#,g]. Weapon^']. Num\Veapon  >  0)A 
(    Army^gj.Weaponf^.UseLimit  >  0)A 
(    Army[5,^].Weapon[i]. Range  >  0)A 
(3e,     1  <  e  <  N Army [->B],ATmy[->B,e]. Squadrons  >  OA 
(3k,     1  <  k  <  Army [-> I?,  e]. Squadrons, 
(3j,      1  <  j  <  Army[B,<7]. Squadrons, 

Endurance(-iB,  e,  k,  Mainloop)  >  OA 

Endurance(B,g,j,  Mainloop)  >  OA 

Observe(B,g,j,  e,  k,  Mainloop  —  1)  A  InRange(B,g,i,  e,  fc,  Mainloop) 

Condition  II:(Army[5, #].Weapon[?].FireRate  <  0) 
Condition  III: 

(Army[B,g].\\rea.pon[i]. Damage  ^  0)  A  (Army[->.£?,  e].WeaponSensativity[?]  >  0)A 

(Duration  >  Mainloop)A 

(fir,l  <  r  <  NCmsgs[--£], 

Mimp(->B,  e,  r,  Duration)  A  ->Mimp(-iB,  e,  r,  Mainloop  —  1)))) 
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1.22:     Report   Message  processed  ahead  of  command  message 
with  equal  priority,  receipt  time 
Condition  I: 

Active(B,  g)  A  Active(^B,  e)  A  Active(B,  /)A 

(3i,  1  <  i  <  NCmsgs[f?],  Mimp(B,g,i,  Mainloop)  A  -iMimp(B,g,  i,  Mainloop  —  1)A 

Army[5,  /]. Report  =  g  A  (3t,  1  <  t  <  Duration, 

(t  =  Mainloop  —  Army[i?,  gj.ProcDelay  —  Army[5,  gj.MediaDelay 

-Army[£,/].SendRate-  1)A 
(3k,  1  <  k  <  Army[-iB,  e]. Squadrons,  Endurance(->B,  e,  k,  t)  >  OA 

3j,  1  <  j  <  Army[5,  /]. Squadrons,  Observe(B,  f,j,  e,  &,  <))) 

Condition  II: Army[B,/]. Priority  =  CmsgsfB^']. Priority 
Condition  III: 

'NCmsgs[B]  (1  if  Mimp(B,  g,  m,  Mainloop)  A  ->Mimp(B,g,m,  Mainloop  —  1)\ 

171=1       [0  otherwise/ 

>  NurnProcess(B,  g,  Mainloop)) 


1.23:  Invalid  width,  height  when  squadron  leaves  grid 

Condition  I:Active(B,g) 
Condition  II: 

(Bj.l  <j  <  Avmy[B,  g\. Squadrons,  Endurance(B,  g,  j,  Mainloop)  >  OA 

{Xb,9,j (Mainloop)  <  0  V  A'fii5J (Mainloop)  >  Params.XDelta  x  MaxTerrainV 
is ,5 j (Mainloop)  <  0  V  )'Bi5iJ (Mainloop)  >  Params.YDelta  x  MaxTerrain)) 

Condition  III: 

(/S?,l  <  i  <  NCmsgs[B}.  Mhnp(B,g  J,  Duration)  A  ^Mimp(B,g,  i,  Mainloop  -  1)) 
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1.25:     Observations  and  Weapon  coordinates  cleared  by  com- 
mand messages 
Condition  I: 

Active(B,g)A 

(3i,  1  <  i  <  NCmsgs[B],Mimp(B,g,i,  Mainloop)  A  ->Mimp(B,g,  z,  Mainloop  —  1)) 

Condition  II: 

Active(->B,  e)A 

(3i,   1  <  i  <  Params.NumWTypes, 

(N  umW  eapon(B ,  g ,  z,  Mainloop)  >  OA 
(Army[i?,  <7J.Weapon[z].FireRate  >  0)A 
(Army[#,  g].Weapon[z'].UseLimit  >  0)A 
( Army [B, #].  Weapon  [z]. Range  >  0)A 
(3k,  1  <  k  <  Army[-iB,  e}. Squadrons, 
(3j,   1  <  j  <  Army [B,g\. Squadrons, 

Endurance(-<B ,  e,  k,  Mainloop)  >  OA 

Endurance(B,g,  j,  Mainloop)  >  OA 

Observe(B,g,j.  e,  k,  Mainloop  —  1)  A  InRange(B,g,i,  e,  k,  Mainloop  —  1) 

Condition  III: 

(Army[i?,  <7].Weapon[z]. Damage  ^  0)  A  (Army[-i.B,  e].WeaponSensativity[z]  >  0)A 
(Duration  >  Mainloop  4-  1)  A  (->Casualty(->B,  e,  k,  Mainloop))A 

p.   r    ^    Endu  ra  n  ce(-'B,e,fc,  Mainloop)  —  Da  ma  ge(-*B  ,e,k,  Mainloop)  +  Da.Tnage(-<B,e,k,  Mainloop>—  1)  . 

Army  [-■B.e].  Endurance^] 

(jBr,  1  <  r  <  NCmsgs[-.£], 

Mimp(—<B,  e,  r,  Duration)  A  ^Mimp(-^B,  e,r,  Mainloop  —  1)))) 
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1.27:  Enemy  instead  of  current  position  in  observation  jamming 
Condition  I: 

Active(->B,  e)  A  Active(B,g)A 
(3fc,l  <  k  <  Army[-'i?,e]. Squadrons, 
(3j,  1  <  j  <  Army [B,g). Squadrons, 

Endurance(->B,  e,  k,  Mainloop)  >  OA 

Endurance(B,  p,j,  Mainloop)  >  0  A  BigEnough(B,g,j,e,k,t)  A  Clear(B,g,j,e,k,t) 

Condition  II: 

Params.SampleRate  >  2A 

(x^Bie(Mainloop)  ^  :r£>5(Mainloop)V 
t/-,Bie(Mainloop)  ^  ySiP(Mainloop))A 
XQJ  =  xB,g,j(t  -  1)  A  ygj  =  Vb^A1  ~  l)A 

Xek  =  X^B,e,kit  -  !)  A  Vek  =  y-^B,e,k(t  ~  *)A 

aBI(a'  ,c'  ,xek,yek)  —  Army  [-»£?, e].SquadIntensity(k] 
BI(a',c',xek,yek) 
Params.SampleRate 

J2  {{WO{xek,yek,  Mainloop)  x  Army[5,s].VWEffect)  + 

n=l 


NArmv[-ifi] 

E 

e'  =  l 


/(x_Bie»(Mainloop  -  1)  -  xek)2+      .         r    „     ,,  _,  0    ,. 

0    if  w  ,w  .  i  -■  \  in?     >  Army \->B, e  .UbsJamRadms 

V(y-Be'(Mainloop  -  1)  -  yekf  Ji  J 


/(x-,B]e'(Mainloop  —  1)  —  xek)2-\- 
j („,B«. (Mainloop  -  1 )  - yekf  ArmyhB)e1.0b8junEff  otherwise 

Army[->iJ,e'J.ObsJamRadius  ^  l  '      J 

))  <Army[5,^].0bsMinContrast[j]) 
Condition  IILTrue 

1.28:  Allocated  fixing  exceeds  NumFixersxFixRate 

Condition  I: 

Active(B,  g)  A  (3j,  1  <  j  <  Army [B,  g]. Squadrons,  Casualty(B,  g,j,  Mainloop) 

Condition  II: 

(Endurace(B,g,j,  Mainloop)  —  Army  [J9,<7J. Endurance^'])  > 
(Army[£,  gj.FixRate  x  NumFix(B,g,  Mainloop) 

Condition  III: 

(Endurance(B, g,j,  Mainloop)  +  Army[i?,  gj.FixRate  x  NumFix(B,g,  Mainloop)) 

..    Army[B,g].Endurance[j]  . 

(y3m,  1  <  m  <  NCmsgs[i?],Mzmp(i?,#,m,  Duration)  A  ^Mimp(B,  g,  m,  Mainloop)) 
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Failure  Regions  in  Version  2 

2.1:  No  check  if  report  message  destination  is  existing  battalion 
Condition  I: 

Active(B,  g)  A  Active(->B,  e)  A 

(3k,  1  <  k  <  Army[->f?,  e]. Squadrons, 

(3j,  1  <  j  <  Army[B,g]. Squadrons, 

(3f,  1  <  <  <  Mainloop,  Observe(B,g,j,e,  k,t)))) 

Condition  11:0  >  Army [5, g). Report  V  NArmy[£]  <  Army[5, #]. Report 
Condition  III:True 

2.2:   No  check  if  command  message  destination  is  existing  bat- 
talion 

Condition  I: 

Duration  >  0  A  3t,  1  <  t  <  Duration, 
3B,B  E  {true,  false},  NArmy[B]  >  0 

Condition  II: 

3m,  1  <  m  <  NCmsgs[5],  Cmsgs[5,  m]. Time  =  t/\ 

Cmsgs[B,  m). Army  =  B  A  (Cmsgs[5,  m). Dest  <  0  V  Cmsgs[5,  m].Dest  >  NArmy[£]) 

Condition  IILTrue 

2.3:  Message  not  queued  for  processing  in  next  dt 
Condition  I: 

Activt(B,g)  A  (3m,  1  <  m  <  NCmsgs[5],  RecT(B,g,m)  =  Mainloop 

Condition  II: 

CmdSum(B,  g,  m,  Mainloop)  +  ReptSum(B,  g,  m,  Mainloop) 
=  NumProcess(B,g,  Mainloop  —  1) 

Condition  IILTrue 
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2.4:  Improper  count  of  available  receivers 
Condition  I: 

Active(B,g)  A  3j,  1  <  j  <  Avmy[B, g]. Squadrons,  Casualty (B, <7,j,  Mainloop) 
Condition  II: 

NumRec(B,  #,  Mainloop)  ^  NumRec(B,g,  Mainloop  —  1) 
Condition  III: 

3m,  1  <  m  <  NCmsgs[5],  Cmsgs[i?, gj.Dest  =  g  A  RecT(B,g,m)  =  Mainloop 

2.5:  Incomplete  recalculation  when  command  implemented 
Condition  I: 

Active(B,g)  A  (3m,  1  <  m  <  NCmsgs[5],  Mirnp( B,g,  m,  Mainloop)) 

Condition  II: 

(3e,l  <  e  <  NArmy[^£],  Army[-i5,  e]. Squadrons  >  OA 

3k,  1  <  A:  <  Army[-iJ3,  e]. Squadrons,  Endurance(^B,  e,  /:,  Mainloop)  >  OA 

3j,  1  <  j  <  Avmy[B,g]. Squadrons, 

Endurance(B ,  g ,  j ,  Mainloop)  >  0  A  Observe(B,g,j,  e,  k,  Mainloop  —  1)) 

VArmy[£?,  gj.NumReceive  7^  Cmsgs[i?,  mj.msg.NumReceive 

Condition  III: 

(3m',  1  <  m'  <  NCmsgs[5],  Mimp(B, g,  m,  Duration)  A  ->Mimp(B,g,m,  Mainloop)) 
V(3z',l  <  i  <  P&rsLms.Kum\\7Types,InRange(B,g,i,e,  k,  Mainloop)) 
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2.6:   Program  fails  when  squadron  exceeds  Terrain  boundaries 

and 

2.31:  Use  of  borders  to  initialize  w,h  calculation  causes  problems 

Condition  I:(Duration  >  0) 
Condition  II: 

3B,  g,Active(B,  g)A 

(X£)5(Mainloop)  >  Params.XDelta  x  MaxTerrainV 
lsi5(Mainloop)  >  Params.YDelta  x  MaxTerrain) 

Condition  III:True 

2.7:  Wrong  points  checked  in  subtended  angle  calculation 
Condition  I: 

Active(B,  g)  A  Active(-^B,  e)A 

3j,  1  <j  <  Army  [5,  g). Squadrons,  Endurance(B,g,  j,  Mainloop)  >  0A 

3^,1  <  k  <  Avmy[-'B,  e]. Squadrons,  Endurance(-iB,  e,  k,  Mainloop)  >  0 

Condition  II: 


(A'fl,5ij(Mainloop  -  1)  >  A^B,e,Jfc(Mainloop  -  1)  +  ArmyhB,e].SquadWidthA 
yBiflii(Mainloop  -  1)  <  K,B,e,,fc(Mainloop  -  1)  +  ArmyhB.el.SquadLength 


.  2 

Condition  III: 


Army[->B,  ej.SquadWidth  >  0  A  ->Observe(B,g,j,  e,  k,  Mainloop) A 
Clear(B,g,j,  e,  k,  Mainloop)  A  Obvious(B,g,j,  e,  k,  Mainloop) A 
(Vt,  1  <  t  <  Duration, 

flj',  1  5-  j'  <  Army[i?, g]. Squadrons, Endurance(Big,j'it)  >  0A 
3k',  I  <  k'  <  Army[->5,  e]. Squadrons,  Endurance(->B,  e,  k',t)  >  0A 
Observe(B,g,j\  e,  k',t)) 
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2.8:    Calculates  the  wrong  angle  if  Observer,  two  corners  are 

colinear 

Condition  I: 

Active(B,  g)  A  Active(->B,  e)A 

3j,  1  <  j  <  Army[5, g\. Squadrons,  Endurance(B,g,j,Ma\n\oop)  >  OA 

3k,  1  <  fc  <  Army [-ii?,  e]. Squadrons,  Endurance^  B,e,  k,  Mainloop)  >  0 

Condition  II: 

((rB,sJ(Mainloop  -  1)  =  K,Bfe,A(Mainloop  -  1)  +  d*a££d*SBS&SS&)v 

(rB,5)i(Mainl00P  -  1)  =  r.B,e,,(MainloOP  -  1)  -  Arn^B.ej.SquadLength^ 

I  XB)iM-(Mamloop  -  1)  -  X-,B,e,k (Mainloop  -  1)  |<  AHnyhB,e].squadWidth 

Condition  III: 

Army[->i3,  ej.SquadWidth  >  0  A  ->Observe(B,g,j,  e,  k,  Mainloop) A 
Clear(B,g,j,  e,  k,  Mainloop)  A  Obvious(B,g,j,  e,  k,  Mainloop)  A 
(Vf,  1  <  t  <  Duration, 

/Sj',  1  <  j'  <  Army[Z?,  g). Squadrons,  Endurance(B,  g,j',  t)  >  OA 
3k',  1  <  k'  <  Army[-i5,  e]. Squadrons,  Endurance(-^B,  e,  k',t)  >  OA 
Observe(B,g,j',  e,  k',t)) 


2.10:   No  check  ifParams.XDelta  =  0 

Condition  LTrue 

Condition  ILParams.XDelta  =  0 

Condition  IILTrue 

2.11:  No  check  if  Params.YDelta  =  0 

Condition  I: True 

Condition  ILParams.YDelta  =  0 

Condition  IILTrue 

2.12:   No  check  if  Params.SampleRate  <  2 

Condition  LTrue 

Condition  ILParams.SampleRate  <  2 

Condition  IILTrue 
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2.13:  Infinite  velocity  if  EO  =  0 
Condition  I: 

Duration  >  0  A  3B,B  G  {true, false},  NArmy[£]  >  OA 
3g, 1  <  g  <  NArmy[£],  Army[5, ^.Squadrons  >  0 

Condition  11:^,1  <  j  <  Army[B, g]. Squadrons,  Army[£?,  gj.Endurancefj]  >  0 
Condition  III: 

(/h',1  <  i  <  NCmsgs[J5],  Mimp(B,g,i,  Duration)  A  ->Mimp(B, g,i,  Mainloop  —  1)) 


2.14:  No  check  if  Army.NumFixers  >  Army. Squadrons 

Condition  I:(Duration  >  0) 
Condition  II: 

(3B,B  e  {l...NArmy[true]}, 

Army[true,  i?].NumFixers  >  Army[true,  B]. Squadrons) V 
{3B,B  6  {l...NArmy[false]}, 

Army  [false,  Bj.NumFixers  >  Army  [false,  B).  Squadrons) 

Condition  III:True 

2.15:  No  check  if  Army.NumJammers  >  Army.Squadrons 

Condition  I:(Duration  >  0) 
Condition  II: 

(3B,B  e  {l...NArmy[true]}, 

Armyftrue,  B]. Num Jammers  >  Army[true,  B]. Squadrons) V 
(3B,B  £  {l...NArmy[false]}, 

Army  [false,  Bj.Num  Jammers  >  Army  [false,  B].  Squadrons) 

Condition  IILTrue 

2.16:   No  check  if  Army.NumProcess  >  Army.Squadrons 

Condition  I:(Duration  >  0) 
Condition  II: 

{3B,B  e  {l...NArmy[true]}, 

Army[true,i?].NumProcess  >  Army[true,  B]. Squadrons) V 
{3B,B  e  {l...NArmy[false]}, 

Army  [false,  B].  NumProcess  >  Army[false,  B].  Squadrons) 

Condition  IILTrue 
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2.17:  No  check  if  Army.NumReceive  >  Army. Squadrons 

Condition  I:(Duration  >  0) 
Condition  II: 

(3B,B  £  {l...NArmy[true]}, 

Army  [true,  #].NumReceive  >  Army[true,  B].  Squadrons)  V 
{3B,B  €  {l...NArmy[false]}, 

Army[false,  5].NumReceive  >  Army[false,  B]. Squadrons) 

Condition  III:True 

2.18:  No  check  if  Army.NumSend  >  Army.Squadrons 

Condition  I:(Duration  >  0) 
Condition  II: 

[3B,B  G  {l...NArmy[true]}, 

Army  [true,  i?].NumSend  >  Army[true,i?].Squadrons)V 
[3B,B  e  {l...NArmy[false]}, 

Army  [false,  jBj.NumSend  >  Armyffalse,  B].  Squadrons) 

Condition  IILTiue 

2.19:  No  check  if  Cmsgs.msg.NumFixers  >  Cmsgs.msg. Squadrons 
Condition  I: 

3B,        B  €  {true, false}, 
(3/,l  <f<  NArmy[£], 

(3m,  m  E  {l...NCmsgs[5]},il/imp(B,/,m,  Duration))) 

Condition  II: 

Cmsgs[5,r77].Msg.NumFixers  >  Cmsgs[i?,  m). Msg. Squadrons 
Condition  IILTrue 

2.20:  No  check  if  Cmsgs.msg. Num Jammers  >  Cmsgs.msg. Squadrons 

Condition  I: 

3B,        B  e  {true, false}, 
(3/,l  <  /  <  NArmy[£], 

(3m,  m  e  {l...NCmsgs[B]},Mzmp(5,/,m,  Duration))) 

Condition  II: 

Cmsgs[jB,  mj.msg.NumJammers  >  Cmsgs[i?,  m], msg. Squadrons 
Condition  III:True 
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2.21:  No  check  if  Cmsgs.msg.NumProcess  >  Cmsgs.msg. Squadrons 
Condition  I: 

3B,        B  £  {true, false}, 
(3/,l  <  /  <  NArmy[£], 

(3m,  m  €  {l...NCmsgs[£j},  Mimp(B,f,m,  Duration))) 

Condition  II: 

Cmsgs[.E?,  mj.msg. NumProcess  >  Cmsgs[i?,  mj.msg. Squadrons 

Condition  III:True 

2.22:  No  check  if  Cmsgs.msg. NumReceive  >  Cmsgs.msg. Squadrons 
Condition  I: 

35,        B  e  {true, false}, 
(3/,l  <  /  <  NArmy[5j, 

(3m,  m  E  {l...NCmsgs[B]},A/imp(5,/,m,  Duration))) 

Condition  II: 

Cmsgs[jB,  mj.msg. NumReceive  >  Cmsgs[5,  mj.msg. Squadrons 

Condition  III:True 

2.23:  No  check  if  Cmsgs.msg. NumSend  >  Cmsgs.msg. Squadrons 
Condition  I: 

3j5,        B  e  {true, false}, 
(3/,l  <f<  NArmy[B], 

(3m,  m  6  {l...NCmsgs[5]},  Mimp(B,f,m,  Duration))) 

Condition  II: 

Cmsgs[i?,  mj.msg. NumSend  >  Cmsgs[i?,  mj.msg. Squadrons 

Condition  IILTrue 
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2.25:   Multiple  Reports  processed  in  queue  order 
Condition  I: 

Active(^B,  e)  A  Active{B,  g)  A  Active(B,  /)  A  Active{B,  /')  A  /  ^  f  A 
3k,  1  <  A:  <  Army[->i?,  c]. Squadrons,  (Endurance(->B,  e,  Mainloop)  >  0)A 
(3r\2  =  Mainloop  —  Army[j9,  /j.SendRate  —  Army[B,  <7j.MediaDelay— 
Army[.B,.c?].NumReceive  *  I      '"J"  -J 

3j,  1  <  j  <  Army[5,  /]. Squadrons,  Endurance(B,  f,j,t)  >  0  A  Observe(B,  f,j,e,k,t))A 
(3t',f  =  Mainloop  -  RepT(B,f',g)  -  Army[J9,#].ProcDelay 

Army[B,g].RecRate 

NumRec(B,  g,  Mai  nloop-  Army  [B,p].ProcDelay) 

3j',  1  <j'  <  Army[£,/'j. Squadrons,  Endurance(B,  f',j',t')  >  0 
AObserve(B,  /',;',  e,  M')) 

Condition  II: 

Army[5,  /]. Priority  >  Army[5,  /'j.PriorityA     . 
Army[£, /j.SendRate  >  Army[£, /'j.SendRate 

Condition  III: 

(3z,l  <  i  <  Params.NumWTypes,  InRange(B,g,  i,  e,  /:,  Mainloop  +  1))A 

(V/,  1  <  <  <  Duration, 

A?',  1  <  J'  £  Army[5,  #]. Squadrons,  Endurance(B,g,j',t)  >  OA 

3/:',  1  <  k'  <  Army[-i5,  e]. Squadrons,  Endura7ice(-<B,  e,  /:',  2)  >  OA 

Observe(B,g,j',e,k',t)) 


2.26:  gold  observes  when  version  does  not 

Condition  I:Active(B,  g)  A  Active(-^B,  e) 
Condition  II: 

SomeObserve(->B,e,g,2)  A  (3m,  1  <  m  <  NCmsgs[5],  Mimp(B,g,rn,  1)) 

Condition  ILTrue 

2.30:  Alt  poorly  defined  when  battalion  leaves  terrain  grid 

Condition  I:(Duration  >  0) 
Condition  II: 

35,  g,Active(B,  g)A 

(XB,g  (Mainloop)  <  0  V  YB,g (Mainloop)  <  0) 

Condition  IILTrue 
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Failure  Regions  in  Version  3 


3.1:  Improper  count  on  number  of  busy  processors  in  procedure 

ReceiveMessages 

Condition  I: 

(3B,(3f,Active{B,f)A 

(Army[i?,/].NumReceive>  0)A 

(NCmsgs[£]  >  0)A 

(3i,  1  <  i  <  NCmsgs[5],PTR\CMessage  =  i))) 
A(PTR  ^  nil)  A  (PTR'.DestArmy  =  B)  A  (PTR'.DestBatt  =  /) 

Condition  II:(PTR". Processed  =  reed)  A  (PTR\TimeRecd  =  Mainloop) 
Condition  III: 


/ 


{ 1     if (AT  .DestArmy  =  B)  A  (AT.DestBatt  =  /)A 

(AT. Processed  =  reed)  A  (AT.TimeRecd  >  Mainloop) 


A/".next=nul] 

E 

A/=HeadQueue 

\  [0     otherwise 

>  Army[5, /j.NumProcessA 


/ 


f  1     if (AT. DestArmy  =  B)  A  (AT.DestBatt  =  /)A 

(AT. Processed  =  reed)  A  (AT.TimeRecd  >  Mainloop) 


A/".next=nil 
M =HeadQueue 

\  [0     otherwise 

<  Army[5, /].NumProcessA 
(3M,  Me  {HeadQueue, ...,  nil}, 

(AT. DestArmy  =  B)  A  (AT.DestBatt  =  /)A 

(A/\ Processed  =  arrvd)  A  (AT.TimeSent  <  Duration))V 

(3M,  M  €  Cmsgs[£],  (Af.Dest  =  /)  A  (M.Time  >  Mainloop)A 

(Af.Time  <  Duration  A  (Af.mesg  ^  CMsgs[£][PTR\CMessage]))) 
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3.2:  Violation  of  queue  structure  when  messages  of  equal  priority 
are  ready  for  processing 
Condition  I: 

Active(B,  f)  A  (Army[£,  /j.Num Receive  >  0)A 

(NCmsgs[5j  >  0)  A  (3z,  1  <  i  <  NCmsgs[£],  Rec'.CMessage  =  i)A 

(HeadQueue  ^  nil) 

(  3M,  Me  {HeadQueue.. .nil}, 
(M \CMessage  ^  Rec'.CMessage)A 
(M'.DestArmy  =  B)  A  (A/'.DestBatt  =  /)) 

Condition  II:(3place,  place  E  {HeadQueue. ..nil},  place'. priority  <  Rec'. priority) 
Condition  IILTrue 

3.3:  Message  implemented  in  destroyed  battalions  in  procedure 

FollowCommandMessages 

Condition  I: 

(  Duration  >  0)  A  (Mainloop  €  {0... Duration}) 
A(((J5  =  True)  A  (NArmy[£]  >  0)  A  (/  €  {l...NArmy[£]})A 
(Army[B,/]. Squadrons  >  0)A 
(Army[£,/].NumReceive>  0)A 
(3t,  1  <  i  <  Army[B,/]. Squadrons, 

Endurance(B,f,i,  Mainloop)  >  0)A 
(NCmsgs[£]  >  0)A 

(3z,l  <  i  <  NCmsgs[£],  Match'. CMessage  =  i))V 
((£  =  False)  A  (NArmy[£]  >  0)  A  (/  G  {l...NArmy[£]})A 
(Army  [5,/].  Squadrons  >  0)A 
(Army[5,/].NumReceive>  0)A 
(3i,l  <  i  <  Army[B,/]. Squadrons, 

Endurance(B,f,i,  Mainloop)  >  0)A 
(NCmsgsfB]  >  0)A 
(3i,  1  <  i  <  NCmsgs[£],  Match'. CMessage  =  i))) 

/  rr  _  V^    a    °nsJ  1  if  Endurance(B,f,  s,  Mainloop)  <  0 

I  ~  [0  otherwise 

AMatch  ^  NIL 
Condition  II: 

Aimy[B,f]. Squadrons  —  K  <  0 
Condition  III:True 
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3.4:    Initial  Endurance   <=  0  reported  erroneous   in  command 

messages 

Condition  I: 

SB,        B  e  {true, false}, 
(3/,l  <  /  <  NArmy[£], 

(3rn,m  €  {l...NCmsgs[i?]},Mimp(£?,/,m,  Duration))) 

Condition  II: 

3j,  1  <  j  <  Cmsgs[i?,m].Msg.Squadrons,Cmsgs[i?,m].Msg.Endurance[.s]  <  0 

Condition  III:True 

3.5:  Initial  velocity  counted  incorrect  if  Endurance  <=  0 
Condition  I: 

(ArmyNumE  {true, false})  A  (Batt  €  {l...NArmy[ArmyNum]})A 
(Army[ArmyNum,  Batt]. Squadrons  >  0) 

Condition  II: 

(3s,s  E  {1...  Army  [Army  Num.  Batt].  Squadrons}, 
Army[ArmyNum,  Batt].Endurance[s]  <  0)A 
(3i,i  E  {l...Army[ArmyNum,  Batt]. Squadrons},  Army[ArmyNum,  Batt]. V0[z]  ^  0) 

Condition  III: 

(jBs',s'  E  {l...Army[ArmyNum,  Batt]. Squadrons}, 

(Army[ArmyNum,Batt].VO[s']  < 

ArmyfArmyNum,  Batt].V0[s])A 

( Army [ArmyNum,  Batt]. Endurance^']  <  0)) 
((  Duration  =  0)V 
(   /3m, mE  {l...NCmsgs[ArmyNum]}, 

7l/imp(ArmyNum,  Batt,  m,  Duration))) 
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3.6:     Array  range  violations  in  BatPosition  lead  to  setting  of 
wrong  battalion's  squad  positions 

Condition  1:35,  3g,  Activ e(B,g) 
Condition  II: 

Endurance(B,g,  Aimy[B,g}. Squadrons, Mainloop)  <  0 

Condition  IILTrue 

3.7:  KU  equations  not  supported 

and 

3.8:  dNK  equations  not  supported 
Condition  I: 

(3B,(3g,Active(B,g)  A 

(Params.NumWTypes  >  0))) 

(3i,  1  <  i <  Params.NumWTypes, 

( Army  [5,(7]. Weapon^']. NumWeapon  >  0)A 
(Army[i?,g].Weapon[?].FireRate  >  0)A 
(Army[i?,^].Weapon[?].UseLimit  >  0)A 
(Army[B,^].Weapon[z]. Range  >  0)A 

(3e,     1  <  e  <  NArmy[-.£], 

(3k,     1  <  k  <  Army[-iB,  e]. Squadrons, 

(3j,      1  <  j  <  Aimy[B,g]. Squadrons, 

Endurance(->B,  e,  k,  Mainloop)  >  0A 

Endurance(B,g,j,  Mainloop)  >  0A 

Observe(B,  g,  j,  e,  k,  Mainloop)  A  InRange(B,  g,  i}  e,  fc,  Mainloop) 

)       )    )) 

Condition  II:True 
Condition  III: 

(ySm,  1  <  m  <  NCmsgs[i3],  Mimp(B,g,m,  Duration)  A 
-iMimp(B,  g,m,  Mainloop)) 
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3.9:  Wrong  Sx,Sy  used  in  calculation  of  K 
Condition  I: 

Active(B,g)  A  Active(-'B,e)A 
(3z,  1  <  i  <  Params.NumWTypes, 

(Army[B,^].Weapon[z].NumWeapon  >  0)A 

(Army[J3,p].Weapon[z].FireRate  >  0)A 

(Army[i?,  <7].Weapon[z].UseLimit  >  0)A 

( Army [B, <7J.Weapon[i]. Range  >  0)A 

(3k,  1  <  k  <  Army [->B,  e]. Squadrons, 
(3j,  1  <  j  <  Army [B, #]. Squadrons, 

Endurance(-iB ,  e,  k,  Mainloop)  >  OA 

Endurance(B,  g,  j,  Mainloop)  >  OA 

Observe(B,  g,  j,  e,  k,  Mainloop)  A  InRange(B,g,  z,  e,  k,  Mainloop) A 

xek  =  x^b  e  ^(Mainloop  —  1)  A  yek  =  y_,s  e  ^(Mainloop  —  1) 

)       ) 

Condition  II:(Army[i?,0].X  ^  xek)  A  (Army[£,#].Y  ^  yek) 
Condition  III: 

(Duration  >  Mainloop  +  1)  A  Casualty(-<B,  e,  k,  Mainloop  +  1)A 


0.5  < 


Endurance(->B ,  e,  k,  Mainloop)  +  Damage^B,  e,  k,  Mainloop)  — 
Damage(->B,  e,  k,  Mainloop  —  1) 


Army[-i.B,  e].Endurance[fc] 
A(/3m,l  <  m  <  NCmsgs[-iB],  Mimp(-^B,  e,  m,  Duration)  A  -iMimp(-<B,  e,m,  Mainloop))) 


3.10:  Duration=0  considered  erroneous 

Condition  LTrue 
Condition  II:Duration  =  0 
Condition  IIIrTrue 
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3.11:  M>MaxTerrain  instead  if  M>= MaxTerrain  in  findA 


an< 


3.20:   N>MaxTerrain  instead  if  N>=MaxTerrain  in  findA 

Condition  I:(Duration  >  0) 
Condition  II: 

35,  g,Active(B,  g)A 

XBi5(Mainloop)  =  Params.XDelta  x  MaxTerrain  [for  3.1 1]V 
yei5(Mainloop)  =  Params.YDelta  x  MaxTerrain  [for  3.20]) 

Condition  IILTrue 

3.12:  TM  undefined  when  Dist=0 

Condition  I:Active(B,g) 
Condition  II:V(B,g,  Mainloop)  =  0 
Condition  III: 

(Duration  >  Mainloop)A 

(z£,.g(Mainloop)  ^  TB,g{ Mainloop  —  1)V 

yB,g{ Mainloop)  ^  ySiS(Mainloop  -  1)) 

A(/Sm,l  <  m  <  NCmsgs[5],  Mimp(B,g,  m,  Duration)  A  -<Mimp(B,g,m,  Mainloop)) 


3.13:   Observation  from  side  uses  wrong  points  in  angle  calcula- 
tion 
Condition  I: 

Active(B,  g)  A  Active(->B,  e)A 

(3.7, 1  <  j  <  Army[B,g]. Squadrons,  (3k,  1  <  k  <  Army[-<i?,  e]. Squadrons, 

(  a"B,5,j (Mainloop  —  1)  >  :r-,Bteijt(Mainloop  —  1)A 

yB)5J  (Mainloop  -  1)  =  y^Bieit(Mainloop  -  1))V 
(  xB,g,j (Mainloop  —  1)  <  x_,5ie^(Mainloop  —  1)A 

2/s,5,i(Mainloop  -  1)  =  y_Bie,fc(Mainloop  —  1))V 
(  XB,g ,j (Mainloop  —  1)  =  x-,s)e,ifc(Mainloop  —  1)) 

Condition  II:  Army  [-i£,  ej.SquadLength  >  0  V  Army  [-■£,  e].  Squad  Width  >  0 
Condition  III: 

Clear(B,g,j,e,  k,  Mainloop)  A  Obvious(B,g,j,  e,  k,  Mainloop))) 
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3.15:  Assumes  that  velocity  never  exceeds  99999 

Condition  LDuration  >  0 
Condition  II: 

3B,g,B  G  {true, false},  1  <  g  <  NArmy[E], 
(3^,1  <  s  <  ATmy[B,g). Squadrons, 

Endurance(B,g,  s,  Mainloop)  >  0  A  Army[B,g].VO[s]  >  99999)V 
(3m,  1  <  m  <  NCmsgs[J9],  Mimp( £?,<7,m,  Duration)  A 
(3s,l  <  5  <  Cmsgs[B,m].Msg. Squadrons, 
Cmsgs[B,m].Msg. Endurance^]  >  0  A  Cmsgs[J3][m].Msg.V0[s]  >  99999)) 

Condition  IILTrue 

3.16:    SegViolation  in  FindA  when  battalion  leaves  defined  ter- 
rain 

Condition  I:(Duration  >  0) 
Condition  II: 

3B,  g,Active(B,  g)A 

(Xb,9 (Mainloop)  >  Params.XDelta  x  MaxTerrainV 
YB,g (Mainloop)  >  Params.YDelta  x  MaxTerrainV 
XB<g (Mainloop)  <  0  V  yfii5 (Mainloop)  <  0) 

Condition  IILTrue 

3.17:   Result  variables  not  set  if  Duration<0 

Condition  LTrue 

Condition  II:(Duration  <  0)  A  ((NArmy[true]  >  0)  V  (N  Army  [false]  >  0)) 

Condition  III:True 
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3.18:  N  undefined  in  WeaponsSighting  at  first  occurance 


anc 


3.19:   M  undefined  in  WeaponsSighting  at  first  occurance 

Condition  I:(3B,  (3g,  Active{B,  g))) 
Condition  II:True 
Condition  III: 

(3i,  1  <  i  <  Params.NumWTypes, 

( Army [B,  5r].Weapon[i].Num Weapon  >  0)  A  (Army[i?,  gj.W'eapon^'j.FireRate  >  0)A 
(Army[i?,#].Weapon[z].UseLimit  >  0)  A  ( Army [B, p].Weapon[i]. Range  >  0)A 

(3e,     1  <  e  <  NArmy[-iB], 

(3k,     1  <  k  <  Army[iB,  e]. Squadrons, 

(3j,      1  <  j  <  Army[f?,  g]. Squadrons, 

Endurance(->B,  e,  k,  Mainloop)  >  0  A  Endurance(B,g,  j.  Mainloop)  >  0A 
Observe(B,g,j,  e,  k,  Mainloop)  A  InRange(B,  g,  i,  e,  k,  Mainloop))))) 


3.21:  Does  not  reject  NArmy<0 

Condition  I:(Duration  >  0) 

Condition  II:(NArmy[true]  <  0)  V  (N  Army  [false]  <  0) 

Condition  IILTrue 

3.22:   Restoration  allotted  when  FS<0 

Condition  I: Active{B,g)A(3j,l  <  j  <  Army[5,  g). Squadrons,  Casualty(B,g,j,  Mainloop)) 
Condition  II:Suppl(B,  g,  Mainloop)  <  0 
Condition  IILTrue 
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3.23:  Messages  lost  if  NumProcess  goes  transiently  to  0 
Condition  I: 

Active(B,g)A 

(3m,  1  <  m  <  NCmsgs[£],((Cmsgs[£,m].Time+  Army[5,#].MediaDelay 

+Army[B,#].ProcDelay)  =  Mainloop)A 

(Cmsgs[£?,m].Dest  =  g)) 

Condition  II: 

0  =  ArumProce55(J5,^,Mainloop) 
Condition  III: 

0  <  NumProcess(B ,  g ,  Mainloop  +  1) 

(3m',  1  <  rn  <  NCmsgs[B],  (-iMimp(B,g,m',  Mainloop))  A  Mirnp(B,g,  m',  Duration)) 

3.24:   Positions  not  initialized  when  Duration=0 
Condition  I: 

(ArmyNum  G  {true,  false})  A  (Batt  €  {l...NArmy[ArmyNum]})A 
(Army[ArmyNum,  Batt]. Squadrons  >  0) 

Condition  ILTrue 
Condition  III:(Duration  =  0) 

3.25:  Positions  centered  on  current,  not  previous,  battalion  x,y 

Condition  I:Active(B,g) 
Condition  II: 

(3.7,1  <  j  <  Avmy[B,  g). Squadrons, 

ATmy[B,g].VQ[j)  >  0  A  Endurance(B,g,j,  Mainloop)  >  0) 

Condition  IILTrue 
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3.26:  Initally  destroyed  squadrons  not  in  "Killed" 

Condition  I: 

(ArmyNum  G  {true, false})  A  (Batt  G  {l...NArmy[ArmyNum]})A 
(Army[ArmyNum,  Batt]. Squadrons  >  0) 

Condition  II: 

(3^,5  G  {l...Army[ArmyNum,  Batt]. Squadrons}, 
Army[ArmyNum,  Batt]. Endurance^]  <  0) 

Condition  III: 

((Duration  =  0)V 

(jBrn,m  G  {l...NCmsgs[ArmyNum]}, 
Mimp( ArmyNum,  Batt,  m,  Duration))) 


3.28:  FindA  returns  poorly  defined  value  if  X<0 

Condition  I: 

Active(B,g) 

Condition  II: 

2-BiS(Mainloop)  <  0V 

(3j,  1  <  j  <  Avmy[B,g]. Squadrons,  xsi5>J(Mainloop)  <  0 

Condition  III: 

/3m,m  G  {l...NCmsgs[J5]},  Mimp(B,g,  m,  Duration) 


3.32:  Does  not  reject  Army.Squadrons=0 

Condition  I:(Duration  >  0) 
Condition  II: 

{3B,B  G  {l...NArmy[true]}, 

Army  [true,  B).  Squadrons  =  0)V 
{3B,B  G  {l...NArmy[false]}, 

Army[false,  B]. Squadrons  =  0) 

Condition  IILTrue 
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3.33:  Does  not  reject  Army.NumFixers  >  Army. Squadrons 

Condition  I:(Duration  >  0) 
Condition  II: 

(3B,B  e  {l...NArmy[true]}, 

Army[true,  i?].NumFixers  >  Army[true,  B}. Squadrons) V 
(3B,B  e  {l...NArmy[false]}, 

Army  [false,  i?].NumFixers  >  Army  [false,  B].  Squadrons) 

Condition  III:True 

3.34:  Does  not  reject  Army. Num Jammers  >  Army.Squadrons 

Condition  I:(Duration  >  0) 
Condition  II: 

(3B,B  €  {l...NArmy[true]}, 

Army[true,  £].NumJammers  >  Army[true,  B]. Squadrons) V 
(3B,B  E  {l...NArmy[false]}, 

Army[false,  i?].Num  Jammers  >  Army[false,  B]. Squadrons) 

Condition  III:True 

3.35:   Does  not  reject  Army.NumProcess  >  Army.Squadrons 

Condition  I:(Duration  >  0) 
Condition  II: 

{3B,B  e  {l...NArmy[true]}, 

Armyftrue,  Z?].NumProcess  >  Army  [true,  B].  Squadrons)  V 
{3B,B  e  {l...NArmy[false]}, 

Army  [false,  B\.  NumProcess  >  Army  [false,  B].  Squadrons) 

Condition  IILTrue 

3.36:  Does  not  reject  Army.NumReceive  >  Army.Squadrons 

Condition  I:(Duration  >  0) 
Condition  II: 

(3B,B  e  {l...NArmy[true]}, 

Armyftrue,  J5].NumReceive  >  Armyftrue,  #]. Squadrons) V 
{3B,B  £  {l...NArmy[false]}, 

Army  [false,  £].NumReceive  >  Army[false,  B).  Squadrons) 

Condition  III:True 
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3.37:  Does  not  reject  Army. Num Send  >  Army. Squadrons 

Condition  I:(Duration  >  0) 
Condition  II: 

(3B,B  e  {l...NArmy[true]}, 

Army[true,  5].NumSend  >  Army  [true,  B].  Squadrons)  V 
(3B,B  e  {l...NArmy[false]}, 

Army  [false,  i?].NumSend  >  Army  [false,  B].  Squadrons) 

Condition  III:True 

3.38:  Does  not  reject  Cmsgs.msg.NumFixers  > 
Cmsgs.msg. Squadrons 

Condition  I: 

3B,        B  G  {true, false}, 
(3/,l  <  /  <  NArmy[£], 

(3m,  m  6  {l...NCmsgs[£]},  Mimp(B,  /,  m,  Duration))) 

Condition  II: 

Cmsgs[£?,m].msg.NumFixers  >  Cmsgs[J3,m].msg. Squadrons 

Condition  IILTrue 

3.39:  Does  not  reject  Cmsgs.msg. NumJammers  > 
Cmsgs.msg.  Squadrons 
Condition  I: 

35,        B  G  {true, false}, 
(3/,l  <  /  <  N Army [B], 

(3m,  m  G  {l...NCmsgs[£]},M*'mp(i?,/,m,  Duration))) 

Condition  II: 

Cmsgs[B,m].msg. NumJammers  >  Cmsgs[i?,  m].msg. Squadrons 

Condition  IILTrue 
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3.40:  Does  not  reject  Cmsgs.msg.NumProcess  > 
Cmsgs.msg.  Squadrons 
Condition  I: 

3£,        B  e  {true, false}, 
(3/,l  <f<  NArmy[£j, 

(3m,  m  6  {l...NCmsgs[i?j},Mzmp(£?,/,m,  Duration))) 

Condition  II: 

Cmsgs[i?,  mj.msg. NumProcess  >  Cmsgs[i?,  mj.msg. Squadrons 
Condition  IIIrTrue 

3.41:  Does  not  reject  Cmsgs.msg. NumReceive  > 
Cmsgs.msg. Squadrons 
Condition  I: 

3B,        B  G  {true, false}, 
(3/,l  <  /  <  NArmy[B], 

(3m,  m  £  {l...NCmsgs[J3j},  Mimp(B,  /,  m,  Duration))) 

Condition  II: 

Cmsgs[5,  mj.msg. NumReceive  >  Cmsgs[B,  mj.msg. Squadrons 

Condition  III:True 

3.42:  Does  not  reject  Cmsgs.msg. NumSend  > 
Cmsgs.msg.  Squadrons 
Condition  I: 

3B,        B  e  {true, false}, 
(3/,l  <  /  <  N Army [5], 

(3m,  m  £  {l...NCmsgs[i?]},Mim/>(jB,/,  m,  Duration))) 

Condition  II: 

Cmsgs[i?,  mj.msg. NumSend  >  Cmsgs[i?,  mj.msg. Squadrons 

Condition  IILTrue 
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3.43:   Observes  when  SR<2. 
Condition  I: 

(3B,  3g,  Active(B,g)A 

(3c,     1  <  e  <  NArmy[->£], 

(3k,     1  <  k  <  Army[-«5,e]. Squadrons, 

(3j,      1  <  j  <  Army[5,^]. Squadrons, 

Endurance(-^B,  e,  fc,  Mainloop)  >  OA 

Endurance(B,  <?,j,  Mainloop)  >  OA 

BigEnough(B,  g,  j,  e,  k,  Mainloop) 

Condition  II: 

Params.SampleRate  <  2 
Condition  III:True 

3.44:  NW>0  when  KF=0 
Condition  I: 

{3B,{3g,  Active{B,g)f\ 

(Params.NumWTypes  >  0) 

(3z,  1  <  i  <  Params.NumWTypes, 

(Army[#,  g].Weapon[z].NumWeapon  >  0)A 
(Army[5,5].Weapon[z'].UseLimit  >  0)A 
(Army[i?,  <7].Weapon[z]. Range  >  0)A 

(3e,     1  <  e  <  NArmy[-.5], 

(3k,     1  <  k  <  Aimy[->B,  e]. Squadrons, 

(3j,      1  <  j  <  Army[i?,<7]. Squadrons, 

Endurance(^B,e,  k,  Mainloop)  >  OA 

Endurance(B,g,j,  Mainloop)  >  OA 

Observe(B,g,j,  e,  k,  Mainloop)  A  InRange(B,g,  z,e,  k,  Mainloop) 

)       )    ) 

Condition  II:(Army[£,p].Weapon[*'].FireRate  =  0)))) 
Condition  IILTrue 
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3.45:  Ax,Ay  set  in  destroyed  battalion 

Condition  I: 

(Duration  >  0)  A  (0  <  Mainloop  <  Duration) 
{3B,{3g,  (Army[5,s]. Squadrons  >  0)A 

(3j,  1  <  j  <  Ain\y[B, g]. Squadrons,  Endurance(B,g,j,  Mainloop  —  1)  >  0)))A 
(Params.NumWTypes  >  0) 

(3i,   1  <  i  <  Params.NumWTypes, 

(Army[5,^].Weapon[z].NumWeapon  >  0)A 
(Army[5,p].Weapon[z].FireRate  >  0)A 
(Army[£?,  gj.Weaponfzj.UseLimit  >  0)A 
(Army[i?,<7].Weapon[z]. Range  >  0)A 
(3e,  1  <  e  <  NArmy[^5],yldzi;e(-.5,e)A 
(3k,  1  <  k  <  Army [->B,e\. Squadrons, 
(3j,   1  <  j  <  Army  [j9,<7].  Squadrons, 

Endurance(-<B,  e,  k,  Mainloop)  >  0A 

Endurance(B,  g,  j,  Mainloop  —  1)  >  0A 

Observe(B,g,j,  e,  k,  Mainloop  —  1)  A  InRange(B,g,i,  e,  A:,  Mainloop) 

Condition  II: ->Active(B,g) 
Condition  III: 

(Duration  >  Mainloop  +  1)  A  Casualty(->B,  e,  k,  Mainloop  +  1)A 


0.5  < 


Endurance(->B ,  e,  k,  Mainloop)  +  Damage(->B,  e,  k,  Mainloop)  — 
Damage(->B,  e,  k,  Mainloop  —  1) 


Army[-ii?,  e].Endurance[£] 

i[-i£],M: 
A->j\/imp(-iJ5,  e,  m,  Mainloop)))) 


A(/3m,l  <  m  <  NCmsgs[-i5],Mz'mp(-'5,e,m,  Duration). 
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Failure  Regions  in  Version  4 


4.1:  Uninitialized  field  in  pointer 
Condition  I: 

Active(B,g)  A  Active^ B,e)  AActive(B,f)  A  Army[5,  /]. Report  =  gA 
(3£,0  <  t  <  Duration, 

t  =  Mainloop  -  RepT(B,g,f)  -  Army[£,#].ProcDelay- 

Army  [B  ,g]  .RecRate » 


NumRec(B,g .Mainloop—  Army [B ,g] .ProcDelay) ' 

EObserve{B,  /,e,f) A 
(3*',0  <  t'  <  t,EObserve(B,g,e,t'))) 

Condition  ILTrue 
Condition  III:True 

4.2:  No  check  for  legal  range  of  subscripts  for  Terrain 

Condition  LDuration  >  0  A  Active(B,g) 
Condition  II: 

(3j,  1  <  j  <  Army[i?, g]. Squadrons,  Endurance(B,g,  j,  Mainloop)  >  OA 
(A'biSJ  (Mainloop)  <  0  V  XB,9,j (Mainloop)  >  Params.XDelta  x  MaxTerrainV 
}55j(Mainloop)  <  0  V  YB,g>J (Mainloop)  >  Params.YDelta  x  MaxTerrain)) 

Condition  IILTrue 

4.3:  Wrong  Battalion  WeapSensativity  used  in  Damage  calcula- 
tion 
Condition  I: 

Active(B,  g)  A  Active(-^B,  e)A 

(3u>,  1  <  w  <  Params.NumWTypes,  NumW  eapon(->B ,  e,  it;,  Mainloop)  >  OA 

(3z,  1  <i  <  N u m \ V capon ( -<i?,  e,  w,  Mainloop), 

(3j,  1  <  j  <  Avmy[B,  g\. Squadrons,  Endurance(B,g,  j,  Mainloop)  >  OA 

/   KXB,g  j  (Mainloop)  -  ax_jgie-u;iI(Mainloop))2+ 

^(^fi-s.j^^^11100?)  ~~  a?/-B,e,u;,t(Mainloop))2 

<  Army [~<B,  e].Weapon[it>]. Radius) 

Condition  II:Army[5,  #].WeapSensativity[u;]  /  Army[->jB,  ej.WeapSensativityftu] 
Condition  III: 

(Army[-'i?,e].Weapon[u']. Damage  >  0)A 

(^im,l  <  m  <  NCmsgs[5],  Mimp(B,g,m,  Duration) 

A->Mimp(B,  g,m,  Mainloop  —  1))))) 
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4.4:  Wrong  Battalion  VWEffect  used  in  Observation  Jamming 
Condition  I: 

Active(B,g)  A  Active(->B,  e)  A  Params.SampleRate  >  2A 
(3k,  1  <  k  <  Army[->£,  e]. Squadrons,  Endurance(->B,e,  k,  Mainloop)  >  OA 
(3j,  1  <j  <  Army[J9,  g]. Squadrons,  Endurance(B,g,  j,  Mainloop)  >  OA 
BigEnough(B,g,j,e,  k,  Mainloop)  A  Clear(B,g,j,  e,  A;,  Mainloop) 

Condition  II: 

Army  [B,g\.  VWEffect  ^  Army[-.£,e].  VWEffect  A 

(3x',  y',  x" ,  y",  x'  =  Xb,9j( Mainloop  -  1)  A  y'  =  Yb,9,j( Mainloop  -  1)A 

x"  =  X-^.e.^Mainloop  _  1)  A  y"  =  K,B,e,jt( Mainloop  —  1)A 

(3n,  1  <  n  <  Params.SampleRate, 

WO  (*'  x  KS=S^aR=:,y'x  ps^^kr.. Mainloop)  >  0)) 

Condition  III: 

(Obvious(B ,  g,  j,  e,  k,  Mainloop)A 

(flt,0  <t  <  Duration, t  ^  Mainloop  A  EObserve(B, g,  e,*)))V 

(-*Obvious(B ,  <?,  _;',  e,  fc,  Mainloop) A 

(Vt,  0  <  t  <  Duration,  t  ^  Mainloop  A  ->EObserve(B,g,  e,  <))))) 


4.5:  No  Check  for  Destroyed  Squad  before  Initializing  Location 
Intensity 

and 

4.6:  No  Check  for  Destroyed  Squad  before  Observation 

Condition  I:Active(B,g)  A  Active(-^B,  e) 
Condition  II: 

(3,7,1  <  j  <  Army[i?, g}. Squadrons,  Endurance(B, g,  j,  Mainloop)  <  OA 
(3k,  1  <  A-  <  Army[->i?,  e]. Squadrons,  Endurance(->B,  e,  k,  Mainloop)  >  OA 
Observe(B,g,j,  e,  k,  Mainloop))) 

Condition  IILTrue 
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4.7:  Wrong  Armyld  in  Check  for  Destroyed  Battalion  in  Obser- 
vation 

Condition  I:Active(B,g)  A  Active(->B,  e) 
Condition  II: 

(3k,  1  <  A;  <  Army[-ii?,  e]. Squadrons,  Endurance(-yB,  e,  k,  Mainloop)  >  OA 
(3j,  1  <  j  <  Avmy[B,  g]. Squadrons,  j  =  k  A  Endurance(B ,  g ,  j ,  Mainloop)  <  0 

Condition  III: 

(3k',  1  <  A:'  <  Army [->£?,  e]. Squadrons,  Endurance(-^B,  e,  k,  Mainloop)  >  OA 
Observe(-*B,e,  k',g,j,  Mainloop))  A  (V/,0  <  t  <  Duration,  ->EObserve(->B,  e,g,t)))) 


4.8:  Counting  loop  runs  off  end  of  Observation  List 
Condition  I: 

Active(B,g)  A  Active(-<B,  e)  A  EObserve(B,g,  e,  Mainloop  —  1)A 
(3w,  1  <  w  <  Params.NumWTypes,  NumWeapon (B,g,  w,  Mainloop)  >  OA 

Army[i?,  <7].WeapPriority[e,  w]  >  0) 

Condition  II: 

\{k  91  <  k  <  Army [~<B,  e]. Squadrons  A  Endurance(-<B,  e,  k,  Mainloop  —  1)  >  OA 
(3j,l  <j<  Army[J5,  g}. Squadrons,  Endurance(B,g,j,  Mainloop)  >  OA 

Observe(B,g,j,  e,  A;,  Mainloop  —  1))}|  =  1 

Condition  IILTrue 

4.9:  Wrong  initialization  of  Observation  List 
Condition  I: 

Active(B,  g)  A  Active(->B,  e)A 

(3j,  1  <j<  Army[B,  g\. Squadrons,  Endurance(B,g,j,  Mainloop)  >  OA 
(3k,  1  <  k  <  Army[->J3,  e], Squadrons,  Endurance(->B,  e,  k,  Mainloop)  >  OA 
Observe(B,g,j,  e,  &,  Mainloop) 

Condition  II: 

(3k',  1  <  k'  <  Army[->i?,  e]. Squadrons,  Endurance(->B,  e,  k',  Mainloop)  >  0  A  k  ^  Ar'A 
(3j',  1  <  j'  <  Army[B,g].Squa.drons,  Endurance(B,g,j',  Mainloop)  >  OA 
Observe(B,g,j',  e,  £',  Mainloop))))) 

Condition  III:True 
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4.10:  Spurious  Check  for  Casualty  Squadrons  in  Observation 

Condition  I:Active(B,g)  A  Active(->B,  e) 
Condition  II: 

(3j,  1  <  j  <  Army[B,  g], Squadrons,  Endurance(B ,  g,j,  Mainloop)  >  OA 
Casualty(B,g,j,  Mainloop) A 

(3k,  1  <  k  <  Army[-iJ?,  e]. Squadrons,  Endurance(->B ,  e,  k,  Mainloop  >  OA 
Observe(B,  g,j,  e,  A:,  Mainloop) 

Condition  III: 

(/Sj',  1  <  j'  <  Army[i?, g). Squadrons,  Endurance(B,g,j', Mainloop)  >  OA 
-<Casualty(B,g,j',  Mainloop)  A  Observe(B,g,  j\  Mainloop)))))A 
(/9i,  1  <  t  <  Duration,  t  ^  Mainloop  A  EObserve(B,  g,e,t)) 


4.11:  Incomplete  Command  Message  Implementation 
Condition  I: 

Active(B,g)t\ 

(3m,  1  <  m  <  NCmsgs[5],  Mimp(B,g,m,  Mainloop)  A  ->Mimp(B,g,  m,  Mainloop  —  1)) 

Condition  II: 

(3j,  1  <  j  <  Army[J9,  g]. Squadrons,  Endurance(B,g,j,  Mainloop  —  1)  >  OA 
Casualty(B,g,j,  Mainloop  —  1)) 

Condition  III: 

(NumJam(B,g,  Mainloop  —  1)  =  0  A  Army[i?,  gj.CommJamEff  >  OA 
(3e,  Active(->B,  e), 

/(A^B,e(Mainloop  -  1)  -  A'Bi5 (Mainloop  -  1))2+ 
V  (Ks,e(Mainloop  -  1)  -  yB,fl(Mainloop  -  l))2 

<  Army[i?,  gj.CommJamRadius)  A  Army[i?,  gj.CommJamPriorityfe]  >  0)V 
(NumWeapon  (B,  g,  1,  Mainloop  —  1) 

<  \{k  3  3e,j,  Observe(B,g,j,  e,  k,  Mainloop  —  1)}|  A 
Army[B,^].Weapon[l]. Damage  ^  Army [B,  <?]. Weapon [2]. Damage) 
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4.12:   Misordered  Observation  functions 

Condition  I:Active(B,g)  A  Active(->B,  e) 
Condition  II: 

(3A:,  1  <  k  <  Army[->Z?,  e]. Squadrons,  Endurance(-<B,  e,  k,  Mainloop)  >  OA 
(A"-,B)e^(Mainloop)  ^  X^s,e,k( Mainloop  —  1)V 
KB,e,fc(Mainloop)  ^  >^S)e^(Mainloop  -  1)) 

Condition  III: 

(3j,  1  <  j  <  Army[i?,  g]. Squadrons,  Endurance(B,g,j,  Mainloop)  >  OA 
->Observe(B,g,j,  e,  A:,  Mainloop  —  1)  A  Observe(B,g,j,  e,  k,  Mainloop))) 


4.13:   Spurous  check  in  Message  Processing 
Condition  I: 

Aciive(B,  g)  A  Active(->B,  e)  A  Active(B,  f)  A  Axmy[B,  /]. Report  =  gA 

(3d,  d  =  RepT(B,g,  /)  +  „£$$£££*, 

(3t,t  -4-  d  <  Mainloop  <  t  +  c?  +  Armyfi^^.ProcDelay,  EObserve(B,  f,  e,  *) 

Condition  II: 

(3/',  ,4chre(£,  /'),  Army[£,  /']. Report  =  gA 

(3t\  t'  =  Mainloop  -  (d  +  Army[£,  /'j.SendRate  -  Army[£,  /j.SendRate), 

(3e',  Active(^B,  e')  A  e  7^  e',  EObserve(B,  /',  e',  *') 

Condition  III: 

(jBt",l  <  t"  <  Duration,  £06serre(JB,#,e',*")V 

(t"  ^t'A  (3/",  Active(B,  f")  A  Army[£,  /"].Report  =  <?, 

EObserve{B,f",e',  *"))))))))) 
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4.14:  Wrong  index  in  Message  Processing 
Condition  I: 

Active(B,  g)  A  Active(-*B,  e)  A  Active(B,  /)  A  ArmyfB,  /]. Report  =  g/\ 

(3c?,  d  =  RepT(B,  <7,  /)  +  N^ec^,i^ooP)^ 

(3t,t  +  d  <  Mainloop  <  t  +  d  +  Army[i?,<7].ProcDelay,  EObserve(B,  /,  e,t) 

Condition  II: 

(3/',  Active(B,  /'),  Army[£,  /'j.Report  =  gA 
Avmy[B,f'}. Priority  <  Army[£, /j.PriorityA 
(3e',  Active{pB,  e')  A  e  ^  e',  EObserve(B,  /',  e\  i) 

Condition  III: 

(^i',1  <  *'<  Duration,  EObserve{B,g,e' ,t')V 

\t'  <tA  (3/",  Active(BJ")  A  Army[£,  /"j.Report  =  p, 

£0&5e™e(£,/",e',  *')))))))) 


4.15:  No  Check  for  Engaged  before  Observed  from  Reports 

Condition  I: 

Active(B,  g)  A  Active(B,  /)  A  Active(->B,  e)  A  Army[J5,  /j.Report  =  gA 

(3r,0  <  *  <  Duration, 

<  =  Duration  —  RepT(B,g,  f)  —  Army[i?,  gj.ProcDelay— 

Army [B  ,g]  .RecRate » 


NumRec(B,g , Duration—  Army [B, g]. ProcDelay) ' 

EObserve{B,f,e,t  -  1)) 
Condition  II: 

(3r',  0  <  t'  <  Duration,  EObserve(B,  g,  e,  t  -  1)A 

(3u>,  1  <  w  <  Params.NumWTypes,  NumWeapon(B,g,  w ,/)  >  OA 

Army[i?,  <7J.WeapPriority[e,  w]  >  0  A  InRange(B,  g,e,w,t))) 

Condition  III:True 
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4.16:  Spurious  Check  for  ObsJamEff=0 
Condition  I: 

Active(B,  g)  A  Active(->B,  e)A 

(3,7,1  <  j  <  Army[5, g). Squadrons,  Endurance(B,  <7,j,  Mainloop)  >  OA 
(3A;,  1  <  k  <  Army[->i?,  e]. Squadrons,  Endurance(->B,  e,  k,  Mainloop)  >  OA 
BigEnough(B,g,j,e,  k,  Mainloop)  A  Clear(B,g,j,  e,  k,  Mainloop) 

Condition  II: 

(3e',  1  <  e'  <  NArmy[-£],  Army[-'£,e']. Squadrons  >  OA 
Armyh£,e'].ObsJamEfT  =  0) 

Condition  III: 

->Obvious(B,g,  j,  e,  k,  Mainloop) A 

(fit,  1  <  t  <  Duration,  S omeObserve(B ,  g ,  e,  k,t)))) 


4.18:  Reversed  Parameters  in  Observation 

Condition  I:Active( B,  g)  A  Active(->B,  e)  A  EObserve(B,  g,  e,  Mainloop) 
Condition  II:  g  ^eA  ~^EObserve(B,  e,  g,  Mainloop) 
Condition  IILe  >  NArmy[5]  V  Duration  >  Mainloop  +  1 

4.19:  Abort  in  SetCoordinates  when  Battalion  leaves  Terrain 

and 

4.20:  Abort  in  Slopelntensity  when  Battalion  leaves  Terrain 

Condition  I:Active(B,g) 
Condition  II: 

(A^i5(Mainloop)  <  0  V  XB,g{  Mainloop)  >  Params.XDelta  x  Max  Terrain)  A 
(Yb,9 (Mainloop)  <  0  V  Fb^  (Mainloop)  >  Params.YDelta  x  MaxTerrain) 

Condition  III:True 
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4.21:  NumFixers  Exceeds  Maximum  Value 

Condition  I:Active(B,g) 
Condition  II: 


'1  if  ->Casualty(B, g,j, Mainloop  —  2)A\ 
Endurance(B,g,j,  Mainloop  —  1)  <  0 


Army  [B  ,g]  .Squadrons 

E 

\  (0  otherwise 

>  s(B,g,  Mainloop)  —  NumFix(B,g,  Mainloop  —  1) 


/ 


Condition  III: 


(3j,  1  <j<  Army[£?, g). Squadrons,  Casualty(B,g,j,  Mainloop) A 

/q  A rmy[B,g].FixFlatexNuTnFtx(B,g,j, Mainloop—  1) 


Army  [B  ,g] .  Squadrons 

E 


1  if  Casualty(B,g,j\  Mainloop)  \  ' 
0  otherwise  j 


r  >  Suppl(B,g,  Multiloop)  A 

r  >  (Army[5, g]. Endurance  —  Endurance(B,g,j,  Mainloop))) 


4.22:   Observation  when  Params.SampleRete  <  2 
Condition  I: 

(3B,  3g,  Active(B,  g)A 

(3e,     1  <  e  <  NArmy[-n£], 

(3k,     1  <  k  <  Army[-i5,  e]. Squadrons, 

(3j,     1  <  j  <  Army[B,g]. Squadrons, 

Endvrance(->B ,  e,  k,  Mainloop)  >  0A 

Endurance(B,g,j,  Mainloop)  >  0A 

BigEnough(B,g,j,  e,  k,  Mainloop) 

Condition  II: 

Params.SampleRate  <  2 
Condition  IILTrue 
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4.24:   Wrong  parameter  declaration  in  Command  Message  Pro- 
cessing 
Condition  I: 

Active(B,g) 

(3m,  1  <  m  <  NCmsgs[Z?],  Mimp(B,g,m,  Mainloop)  A  ^Mimp{ B,g,  m,Mainloop  —  1) 

Condition  II: 

(3n,  1  <  n  <  NCmsgs[5]  A  m  ^  rc, 

Mimp(B,g,n,  Mainloop)  A  -iMimp(B,g,n,  Mainloop  —  1))) 

Condition  IILTrue 

4.26:  Priority  Queue  not  Preserved  in  Message  Processing 
Condition  I: 

Active(B,g) 

(3m,  1  <m  <  NCmsgs[i?],  Mimp(B,g,m,  Mainloop)  A  ->Mimp(B,g,  m,  Mainloop  —  1)A 

(3n,  1  <  n  <  NCmsgs[B]  A  m  7^  n, 

Mimp(B,g,  n,  Mainloop)  A  ->Mimp(B,g,  n,  Mainloop  —  1) 

Condition  II: 

(Cmsgs[f?,mj. Priority  >  Cmsgs[£?,n]. Priority)  A 
(Cmsgs[B,  mj.msg  ^  Cmsgs[B,n].msg))) 

Condition  IILTrue 
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Failure  Regions  in  Version  5 

5.1:  Bad  list  manipulation 
Condition  I: 

Active(B,  g)  A  Active(-iB,  e)A 

3j,  1  <  k  <  Army[B,  g]. Squadrons,  Endurance(B,g,  j,  Mainloop)  >  OA 
3k,  1  <  k  <  Avmy[-^B,e].Sqna,dTons,  Endurance(->B,e,  k,  Mainloop)  >  OA 
BigEnough(B,g,j,e,  k,  Mainloop)  A  -*Clear(B,g,j,  e,  k,  Mainloop) 

Condition  II: 

3k',  1  <  k'  <  k,  Endurance(-^B,  e,  k',  Mainloop)  >  0  A  Observe(B,g,j,  e,  k\  Mainloop) 

Condition  IILTrue 

5.2:  ^  instead  of  >  in  check  for  busy  processors 
Condition  I: 

Active(B,g)  A  NCmsgs[B]  >  0 

3,m,  1  <  m  <  NCmsgs[£?], 

RecT(B,g,m)  +  RecDelay(B,g,  RecT(B,g,m))  +  QueDelay(B,g,  m)  =  MainloopA 

NumProcess(B,g,  Mainloop)  >  0 


Condition  II: 
/ 

NCmsgs[S] 

E 

n=l 


'0  if  (n  =  m)  V  Cmsgs[5,  nj.Dest  ^  gV  \ 

RecT(B,  g,n)  +  RecDelay(B,  g,  RecT{B,  g,  n))  + 
QueDelay(B,g,n)  >  Mainloop 


V 


+ 


/ 


NArmv[B] 

£ 


1  otherwise 
'0  if  Army[£,  /]. Report  ^  #V 

(V*,l  <  t  <  Mainloop-  RepT(B,g,f) 
-RecDelay(B,g,RepT(B,g,f)), 
-iSomeObserve(B ,  /,  t)) 


J 


\ 


1  otherwise 
>  NumProcess(B,g,  Mainloop) 


/ 


Condition  III:Mimp(B,g,  m,  Duration)  A  Cmsgs[5,m].msg  ^  Army[B,g] 
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5.3:  Squadrons  with  initial  endurance  <  0  not  destroyed 

Condition  LTrue 
Condition  II: 

3B,B  e  {false,  true},  N Army [B]  >  OA 

3#,  1  <  g  <  NArmy[5],  Army[5,5J. Squadrons  >  0 
3j,  1  <  j  <  Army[B,g]. Squadrons, 
Army[5,^].Endurance[j]  <  0 

Condition  IILDuration  =  0 

5.4:  Squadrons  with  command  endurance  <  0  not  destroyed 
Condition  I: 

Active(B,g)  A  NCmsgs[£]  >  OA 

3m,  1  <  m  <  NCmsgs[J3],  Mimp(B,g,m,  Mainloop) 

Condition  II: 

3j,  1  <  j  <  Cmsgs[J5,m].msg. Squadrons, 

Cmsgs[5,m].msg.Endurance[j]  <  0 

Condition  III:Duration  =  Mainloop 

5.5:  Position  and  PreArmy  values  set  before  Army  values  final- 
ized 

Condition  I: 

Active(B,g)  A  NCmsgs[£]  >  OA 

(3m,  1  <  m  <  NCmsgs[5], 

Mimp(B,  g,  m,  Mainloop)  A  -<Mimp(B,  g,  m,  Mainloop  —  1)) 

Condition  ILTrue 

Condition  IILDuration  =  Mainloop 
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5.6:  Improperly  rejected  Duration  =  0 

and 


5.14:  Positions  not  initialized  if  Duration 

Condition  LTrue 
Condition  ILDuration  =  0 
Condition  IILTrue 


=  0 


5.7:  Improperly  rejected  NArmy  =  0 

Condition  LTrue 

Condition  II:3B,B  G  {false, true}, NArmy[£]  =  0 

Condition  IILTrue 

5.8:  Dequeues  messages  for  existing,  not  available,  processors 
Condition  I: 

Active(B,g)  A  NCmsgs[5]  >  0  A  NumProcess(B,g,  Mainloop)  >  OA 
3t,t  =  Mainloop  -  Army[5,5f].ProcDelay  -  RepT(B,g,f) 
—  RecDelay(B,g,RepT(B,g,f)),l  <t  <  DurationA 


/ 


n,  n  = 


NCmsgs[B] 

E 


m  =  \ 


\ 


( 


+ 


NArmv[B] 

E 


1  if  Cmsgs[j9,  mj.Dest  =  gl\  \ 

RecT(B,g,m)  +  RecDelay(B,g,  RecT(B,g,m))  <  MainloopA 
-iMimp(B,g,m,  Mainloop) 


0  otherwise 

'  /Mainioop-flepT(s,5,/)  f  1  if  SomeObserve(B ,  f,t')\  \ 

E 

\  *'=t  [0  otherwise 

if  Army [B,g\. Report  =  g 


\ 


0  otherwise 


/ 


Condition  II:n  >  NumProcess{B,g,  Mainloop) 
Condition  IIIrTrue 


5.9:  Improperly  rejected  Weather  Start  >  Duration 

Condition  LTrue 

Condition  II:3tu,  1  <  w  <  Params.NumWEvents,  Weather[u>].TStart  >  Duration 

Condition  IILTrue 
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5.10:  Improperly  rejected  Weather  End  >  Duration 

Condition  LTrue 

Condition  II:3w,  1  <  w  <  Params.NumWEvents,  Weather  [u;].TEnd  >  Duration 

Condition  IILTrue 

5.11:  Improperly  rejected  CommJamRadius  =  0 
Condition  LTrue 
Condition  II: 

3B,B  €  {false,  true},  NArmy[£]  >  OA 

3g,l  <g<  NArmy[5],  Army[5,^]. CommJamRadius  =  0 

Condition  IILTrue 

5.12:  Improperly  rejected  ObsJamRadius  =  0 

Condition  LTrue 
Condition  II: 

3B,B  £  {false,  true},  NArmy[£]  >  OA 

3g,  1  <  g  <  N Army[B],  Army[B ,  g]. ObsJamRadius  =  0 

Condition  III:True 

5.13:  Segmentation  violation  when  battalion  leaves  terrain  grid 

and 

5.41:  Altitude  and  IntnstyLoc  poorly  defined  when  Battalion 
leaves  Terrain  grid 

and 

5.42:  Use  of  borders  to  initialize  maximum  and  minimum  for 
W,H  calc  causes  problems  when  squadrons  leave  Terrain-defined 
area 

Condition  I:(Duration  >  0) 
Condition  II: 

3B,  g,Active(B,  g)A 

(A^B)S(Mainloop)  >  Params.XDelta  x  MaxTerrainV 
Y£i5(Mainloop)  >  Params.YDelta  x  MaxTerrainV 
A'SjS(Mainloop)  <  0  V  yBiP(Mainloop)  <  0) 

Condition  IILTrue 
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5.15:  No  check  to  see  if  NW  =  0  before  setting  Action  to  Engaged 
Condition  I: 

Active(B,g)  A  Active(~>B,e)  A  Mainloop  >  1  A  Params.NumWTypes  >  OA 
3j,  1  <  j  <  Army[i?, g\. Squadrons,  Endurance(B, g,j,  Mainloop)  >  OA 
3k,  1  <  k  <  Army[->j3,  e], Squadrons,  Endurance(->B,e,  k,  Mainloop)  >  OA 
Observe(B,g,j,  e,  k,  Mainloop  —  1)A 
3w,  1  <  w  <  Params.NumWTypes, 
Army[i?,<7].Weapon[u?]. Range  > 

l(XB ,g (Mainloop)  -  X^B,e,k (Mainloop  -  1))2  + 
V  (^b.3 (Mainloop)  -  K^e^Mainloop  -  l))2 

Condition  II: 

Army [B, g]. Weapon [w j.FireRate  <  OV 
Army[i?,  #].WeapPriority[e,  w]  <  OV 
Army[5,^].Weapon[u'].UseLimit  <  OV 
Num\Veapon(B,g,w,  Mainloop)  <  OV 
Army[5,^].Weapon[u'].UseLimit  < 

^Mainloop  NumWeapon(B,g,w,t)    f  1  if  dX  B  g  w  t(0  7^  OO 

E  £ 

^     *=2  ,=1  [O  otherwise 

Condition  III: 

\/t,  1  <  t  <  Duration, Ww',  1  <  w  <  Params.NumWTypes, 
NumWeapon(B,g,w',t)  >  0  A  Vi,  1  <  i  <  NumWeapon(B,g,w',t), 
Vk',  1  <  k'  <  Army[-i5,  e]. Squadrons, 

(axB,g,w>,i(t)  ^  X^B^.k'i1)  v  ayB,9,u,'At)  ^  K,Bie,fc'(0)A 

^m,l  <  m  <  NCmsgs[B],  Mimp(B, g,  m,  Duration)  A  ->Mimp(B,g,  m,  Mainloop  —  1) 
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5.16:  Improper  treatment  of  case  where  KF  =  0 

Condition  I: 

Active(B,g)  A  Active(->B,  e)  A  Mainloop  >  1  A  Params.NumWTypes  >  OA 
3j,  1  <j  <  Army[£?,  g}. Squadrons,  Endurance(B,g,j,  Mainloop)  >  OA 
3A-,  1  <  k  <  Army[-»B,  e]. Squadrons,  Endurance(-iB,  e,  k,  Mainloop)  >  OA 
Observe(B,g,j,  e,  k,  Mainloop  —  1)A 
3tu,  1  <  w  <  Params.NumWTypes, 
Army[5,5f].Weapon[ii;]. Range  > 

/(Ars,P(Mainloop)  -  A^5)e^(Mainloop  -  1))2  + 
V  (^(Mainloop)  -  KB,e'*(  Mainloop  -  l))2 

Condition  ILArmyfi?,  #].Weapon[u;].FireRate  <  0 
Condition  III: 

Army[i?,<7].WeapPriority[e,  w]  >  OA 
Army[5,  <7].Weapon[it'].UseLimit  > 

(Mainloop  NumWeapon(B,g,w,t)    f  1   if  dig  g  w  ,-(/)  ^   OO  \ 
E  E 

*=2  ,=1  (0  otherwise  / 

NumWeapon(B,g,w,  Mainloop)  >  0  A  Vi,  1  <  t  <  Duration, 
Vtc',  1  <  w'  <  Params.NumWTypes,  NumWeapon (B,  g,w',t)  >  OA 
Vi,  1  <  i  <  NumWeapo7i(B,g,w',t), 
V&',  1  <  k'  <  Army [->5,  e]. Squadrons, 

(aXB,g,rv>At)  ^  X^B,e,k'(t)  V  ayB>g^,<t (t)  ^  r-,B,e,Jfc'(*))A 

^m,  1  <  m  <  NCmsgs[B],  Mimp(B,g,m,  Duration)  A  -<Mimp(B,g,  m,  Mainloop  —  1) 
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5.17:  Improper  Observation  when  H  =  Z 

Condition  I:Active(B,g)  A  Active(->B,  e) 
Condition  II: 

3j,  1  <  j  <  Army[5,  </]. Squadrons,  Endurance(B,  g,j,  Mainloop)  >  OA 

3k,  1  <k<  Aimy[->B,  e). Squadrons,  Endurance(-\B,  e,  A;,  Mainloop)  >  OA 

Big  Enough(B ,  g ,  j ,  e,  fc,  Mainloop)  A  Obvious(B,g,j,  e,  A:,  Mainloop) A 

->Clear(B,g,j,  e,  fc,  Mainloop) A 

z#j  =  ZB,5j(Mainloop  -I)  A  ygj  =  j/b)5iJ ^(Mainloop  -  1)A 

are/:  =  x-^e^Mainloop  —  1)  A  yefc  =  y_,£te)fc(Mainloop  —  1)A 


c  = 


I  Ml I    A   c'  -    I  ££* I    A 

LParams.YDeltaJ   /v  c  [  Params.YDeltaJ  M 


z  =  Alt(a,c,  xgj,  ygj)  A  z'  =  Alt(a',  c' ,  xek,  yek)A 
(Vn,l  <  n  <  Params.SampleRate—  1, 

Hr    n   o    r  -   2 _    |ggj+rx(xefc-xgj)  I  ygj+rx(yefc-ygj)  1 

W^'V?'  Params.SampleRate'^  L     Params.XDelta    J'^  [     Params.YDelta    J' 

(z  +  rx(z'-  z))  >  Alt(p,  q,  xgj  +  r  x  (xek  -  xgj),  ygj  +  r  x  (yefc  -  ygj))))) 
Condition  HLVt,  1  <  t  <  Duration, -iEObserve(B,g,e,t) 

5.18:  Does  not  reject  Army.NumFixers  >  Army.  Squadrons 

Condition  I:(Duration  >  0) 
Condition  II: 

(3B,B  €  {l...NArmy[true]}, 

Army[true,  I?].NumFixers  >  Army[true,  i?].Squadrons)V 
(3£,£  G  {l...NArmy[false]}, 

Army[false,  Bj.NumFixers  >  Army[false,  B]. Squadrons) 

Condition  IILTrue 
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5.19:  Does  not  reject  Cmsgs.msg.NumFixers  > 
Cmsgs.msg. Squadrons 
Condition  I: 

3B,        B  G  {true, false}, 
(3/,l  <  /  <  NArmy[J3], 

(3m,  m  €  {l...NCmsgs[B]},A/imp(5,/,m,  Duration))) 

Condition  II: 

Cmsgs[i?,m].msg.NumFixers  >  Cmsgs[i?,m].msg. Squadrons 

Condition  IILTrue 

5.20:  Does  not  reject  Army.NumJammers  >  Army. Squadrons 

Condition  I:(Duration  >  0) 
Condition  II: 

(3B,B  G  {l...NArmy[true]}, 

Army[true,  B]. Num Jammers  >  Army[true,  B]. Squadrons) V 
(3B,B  G  {l...NArmy[false]}, 

Army  [false,  B].  Num  Jammers  >  Army  [false,  B].  Squadrons) 

Condition  III:True 

5.21:   Does  not  reject  Cmsgs.msg. NumJammers  > 
Cmsgs.msg. Squadrons 
Condition  I: 

3B,        B  G  {true, false}, 
(3/,l  <  /  <  NArmy[B], 

(3m,  m  G  {l...NCmsgs[J5]},  M imp(B,f,m,  Duration))) 

Condition  II: 

Cmsgs[B,m].msg. NumJammers  >  Cmsgs[B,m].msg. Squadrons 

Condition  IILTrue 
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5.22:   Does  not  reject  Army.NumProcess  >  Army. Squadrons 

Condition  I:(Duration  >  0) 
Condition  II: 

{3B,B  6  {l...NArmy[true]}, 

Army  [true,  .E?].NumProcess  >  Army  [true,  B],  Squadrons)  V 
(3B,B  €  {l...NArmy[false]>, 

Army[false,  Bj.NumProcess  >  Army  [false,  B],  Squadrons) 

Condition  III: True 

5.23:  Does  not  reject  Cmsgs.msg.NumProcess  > 
Cmsgs.msg.  Squadrons 
Condition  I: 

3J5,        B  E  {true, false}, 
(3/,l  <f<  NArmy[£], 

(3m,  m  £  {l...NCmsgs[B}},  Mimp(B,f,m,  Duration))) 

Condition  II: 

Cmsgs[i?,ra].msg.NumProcess  >  Cmsgs[5,  mj.msg. Squadrons 

Condition  IILTrue 

5.24:  Does  not  reject  Army.NumReceive  >  Army.Squadrons 

Condition  I:(Duration  >  0) 
Condition  II: 

(3B,B  e  {l...NArmy[true]}, 

Armyftrue,  i?].NumReceive  >  Army[true,  Z?].  Squadrons)  V 
{3B,Be  {l...NArmy[false]}, 

Army  [false,  l?].NumReceive  >  Army  [false,  B].  Squadrons) 

Condition  IILTrue 
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5.25:  Does  not  reject  Cmsgs.msg.NumReceive  > 
Cmsgs.msg. Squadrons 
Condition  I: 

3B,        B  €  {true, false}, 
(3/,l  <  /  <  NArmy[5], 

(3m,  m  e  {l...NCmsgs[i?]},A/zmp(i?,/,m,  Duration))) 

Condition  II: 

Cmsgs[£?,m].msg.NumReceive  >  Cmsgs[i?,  mj.msg. Squadrons 

Condition  IILTrue 

5.26:  Does  not  reject  Army.NumSend  >  Army.Squadrons 

Condition  I:(Duration  >  0) 
Condition  II: 

(3B,B  E  {l...NArmy[true]}, 

Army  [true,  i?]. NumSend  >  Army  [true,  B}.  Squadrons)  V 
(3B,B  £  {l...NArmy[false]}, 

Army[false,  f?]. NumSend  >  Army[false,  B]. Squadrons) 

Condition  III:True 

5.27:  Does  not  reject  Cmsgs.msg. NumSend  > 
Cmsgs.msg.  Squadrons 
Condition  I: 

35,        B  E  {true, false}, 
(3/,l  <  /  <  NArmy[B], 

(3m,  m  e  {l...NCmsgs[£]},  Mimp(B,  /,m,  Duration))) 

Condition  II: 

Cmsgs[5,  mj.msg. NumSend  >  Cmsgs[B,  mj.msg. Squadrons 
Condition  IILTrue 
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5.28:  Improperly  rejected  SampleRate  =  1 

Condition  I:True 

Condition  II: Params. SampleRate  =  1 

Condition  IILTrue 

5.30:  Improperly  rejected  Army. Weapon. Range  =  0 
Condition  I: 

3B,B  e  {false,  true},  NArmy[£]  >  OA 

3^,  1  <  9  <  NArmy[5],  Params. NumWTypes  >  0 

Condition  II:3w,  1  <  w  <  Params. NumWTypes,  Army[J5,p].Weapon[u;]. Range  =  0 
Condition  IILTrue 

5.31:  KA  initialized  to  0  not  NK 

Condition  I:Active(B,g)  A  Params. NumWTypes  >  0 
Condition  II: 

3w,  1  <  w  <  Params. NurrAVTypes,  Army[i?,  #].Weapon[u;].Num Weapon  >  0 

Condition  III: 

Active(->B,  e)  A  Params. SampleRate  >  1A 

3j,  1  <  j  <  Army[B, g). Squadrons,  Endurance(B,g,  j,  Mainloop)  >  OA 
3k, 1  <  k  <  Army[-i^,  e]. Squadrons,  Endurance(~>B,  e,  k,  Mainloop)  >  OA 
Observe(B,g,j,  e,  k,  Mainloop  —  1)  A  InRange(B,g,w,e,  k,  Mainloop  —  1)A 
Num\Veapon(B,g,w,  Mainloop)  >  0  A  Army[5,^].WeapPriority[e,iz;]  >  OA 
Army[jB, g].Weapon[u>].UseLimit  >  0 
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5.32:     Weather   movement   components   improperly   rejected   if 
negative 

Condition  LParams.NumWEvents  >  0 
Condition  II: 

3u>,l  <  w  <  Params.NumWEvents, 

Weather [ty].dWX  <  0  V  Weather  [u>].dWY  <  0 

Condition  IILTrue 

5.33:  Command  implemented  in  destroyed  battalion 
Condition  I: 

1  <  Mainloop  <  Duration  A  3B,  B  €  {true,  false}, 

NArmy[£]  >  0  A  NCmsgs[£]  >  OA 

3m,  1  <  m  <  NCmsgs[£],l  <  Cmsgs[£,m].Dest  <  NArmy[£]A 

3g,g  =  Cmsgs[j9,  m]. Dest,  Army[i?,  #]. Squadrons  >  OA 

(3j,  1  <j<  Army[£?,  g). Squadrons,  Endurance(B,g,j,Cmsgs[B,m}. Time)  >  0)A 

Mimp(B,g,m,  Mainloop)  A  ->Mimp(B,g,  m,  Mainloop  —  1) 

Condition  II: 

(^j,  1  <  j  <  Army[B,  g], Squadrons,  Endurance(B,g,j,  Mainloop)  >  0)A 
(Cmsgs[i?,  mj.msg. Squadrons  ^  Army[i?,  <?].SquadronsV 

(3j,  1  <  j  <  Cmsgs[B,  mj.msg. Squadrons,  Cmsgs[J5,m].msg.Endurance[j]  >  0)V 
Cmsgs[.£?,m].msg.X  ^  Xs,g (Mainloop)  V  Cmsgs[i?,m].msg.Y  ^  l£i5  (Mainloop)) 

Condition  IILTrue 

5.34:  V  calculated  using  possible  destroyed  squadrons  with  com- 
mand 
Condition  I: 

Aciive{B,g)  A  NCmsgs[£]  >  OA 

3m,  1  <  m  <  NCmsgs[B],  Mimp(B,g,m,  Mainloop)  A  -<Mimp(B,  g,  m,  Mainloop  —  1)A 

Cmsgs[B,m].msg. Squadrons  >  0 

Condition  II: 

3j,  1  <j<  Cmsgs[5,  m]. msg. Squadrons,  Cmsgs[B,m].msg.Endurance[;']  <  OA 
(/Sj',1  <  j'  <  Cmsgs[B,  m]. msg. Squadrons,  Cmsgs[B,m].msg. Endurance^'']  >  OA 
Cmsgs[£,m].msg.VO[j']  >  Cmsgs[5,  m].msg.V0[j])A 
Cmsgs[i?,m].msg.V0[j]  >  0 

Condition  III: 

,3m',  1  <  m'  <  NCmsgs[£], 

Mimp(B,g,m,  Duration)  A  ^Mimp(B,g,  m,  Mainloop  —  1) 
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5.35:  NumFixers  can  be  greater  than  original  value 

Condition  I: 

Active(B,g)  A  NumFix(B,g,  Mainloop—  1)  >  OA 

(3j,l  <  j  <  Army[i?,  g\. Squadrons,  Endurance(B,g,  j,  Mainloop)  >  OA 

Casualty(B,g,j,  Mainloop  —  1)  A  ->Casualty(B,  g,j,  Mainloop)) 

Condition  II: 

(NumFix(B,  g,  Mainloop  —  1)+ 

(NumCas(B,  g,  Mainloop  -  1)  -  NumCas(B,  g,  Mainloop)  x  ^gg^^zil) 

>  s(B,  g,  Mainloop  —  1) 

Condition  III: 

fim,\  <  m  <  NCmsgs[5], 

Mimp(B,  g,  ra,  Duration)  A  -iMimp(B,g,m,  Mainloop  —  1)A 

Duration  >  Mainloop  +  1  A  NumCas(B,g,  Mainloop)  >  0 


5.37:   gold  observes  when  version  does  not 

and 

5.43:  Version  fails  to  engage 
Condition  I: 

Active(B,  g)  A  Active(->B,  e)  A  Active(B,  /)A 

Army[i?,/]. Report  =  g  A  Mainloop  >  Army[B,  /].ObsXpireA 

NumSend{B,  g,  Mainloop  —  Army[i?, /j.ObsXpire)  >  0 

Condition  II: 

EObserve(B,  /,  e,  Mainloop  —  Army[5,  /].ObsXpire)A 
Army[£,/].ObsXpire  =  RepT(B,f,g)  +  Army[£,s].ProcDelay+ 
RecDelay(B,  g,  Mainloop  —  Army[B,  /j.ObsXpire  +  RepT(B,f,g)) 

Condition  III: 

( flf,  Active(B,  /')  A  Army[£,  /'].Report  =  g, 
3t,l<t<  Duration,  EObserve(B,  f',e,t))A 
(y3<,  1  <  t  <  Duration,  EObserve(B ,  g,  e,t)) 
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5.39:    Current,  not  previous,  observations  sent  in  report  mes- 
sages 
Condition  I: 

Active(B,g)  A  Active(B,  f)  A  Active(->B,e)  A  Armyfi?, /]. Report  =  gA 
(3,7,1  <  j  <  Avmy[B,  f].Squ.8idTons,Endurance(B,f,j,  Mainloop)  >  OA 
(3k,  1  <  k  <  Army[->JB,  e]. Squadrons,  Endurance(-<B,  e,  k,  Mainloop)  >  OA 
Observe(B,  f,j,  e,  k,  Mainloop)  A  Army[5,  /j.NumSend  >  0 

Condition  II:->Observe(B,  /,j,  e,  k,  Mainloop  —  1)) 
Condition  III: 

(Vf,0  <  t  <  Duration,  -^EObserve(B,g,e,t)) 


5.40:  Messages  implemented  out  of  order 
Condition  I: 

Active(B,g)  A  NCmsgs[£]  >  0 

3m,  1  <  m  <  NCmsgs[i?],  Cmsgs[i?,  mj.Dest  =  g/\l 

RecT(B,g,m)  =  Mainloop 

Condition  II: 

(3n,  1  <  n  <  NCmsgs[B],  m  /nA  Cmsgs[B,  rcj.Dest  =  gt\ 

RecT(B,g,n)  <  Mainloop  A  -iMimp(B,g,  n,  Mainloop) A 

Cmsgs[i3,  n]. Priority  =  Cmsgs[i?,  m\. Priority) V 

(3/,  Active(B,  /),  Army[£,  /]. Report  =  g  A  Army[B,  /]. Priority  =  Cmsgs[5,  m]. Priority  A 

32,  Mainloop  —  RepT(B,  f,g)  —  RecDelay(B,g,  Mainloop  —  Army [£,#]. ProcDelay) 

—  Army[5,  gj.ProcDelay 

<  t  <  Mainloop  —  RepT(B,  f,g)  —  RtcDelay(B,  g,  Mainloop  —  Army[5, gj.ProcDelay), 

SomtObserve(B ,  /,  t)) 

Condition  IILTrue 
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Failure  Regions  in  Version  6 


6.1:  Reversed  Parameters  in  UpdatLOSList 

Condition  I: 

Active(B,  g)  A  Active(->B,  e)A 

3j,  1  <  j  <  Army[B,  g\. Squadrons,  Endurance(B ,  <?,,;',  Mainloop)  >  OA 
3k,  1  <  A;  <  Army[->5,  e]. Squadrons,  Endurance^  B,e,  fc,  Mainloop)  >  OA 
BigEnough(B,  g,j,  e,  k,  Mainloop)  A  Params.SampleRate  >  2 

Condition  II: 

XB,g,j (Mainloop  —  1)  ^  X-,,B)e(fc(  Mainloop  —  1)V 
^B ,g j (Mainloop  —  1)  /  Y^B,e, k (Mainloop  —  1) 

Condition  III: 

(->Clear(B,g,j,  e,  fc,  Mainloop))  A  Obvious(B,g,j,  e,  A:,  Mainloop) A 
(,3^,0  <  <  <  Duration,  EObserve(B,g,  e,t)) 


6.2:  No  check  on  send  time  for  commands  of  equal  priority 
Condition  I: 

Active(B,g)  A  NCmsgs[5]  >  0  A  NumProcess(B,g,  Mainloop)  >  OA 

3m,  1  <  m  <  NCmsgs[5],  Mimp(B,g,m,  Mainloop) A 

-<Mimp(B,  g,  m,  Mainloop  —  1)A 

3n,  1  <  n  <  NCmsgs[5],m  ^  n  A  Mimp(B,g,n,  Mainloop) A 

-iMimp(B,g,n,  Mainloop  —  1) 

Condition  II: 

m  <  n  A  Cmsgs[5,  mj.Time  >  Cmsgs[B,  nj.TimeA 
Cmsgs[JB,m]. Priority  =  Cmsgs[j5,  n]. Priority 

Condition  III:Cmsgs[i?,m].msg  ^  Cmsgs[Z?,n].msg 
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6.3:  Improper  calculation  of  LOS  list  point  separation 

Condition  I: 

Active(B,  g)  A  Active(->B,  e)A 

3j,  1  <  j  <  Army[JB, 17]. Squadrons,  Endurance(B,g,  j,  Mainloop)  >  OA 

3k,  1  <  k  <  Army[->i?,  e]. Squadrons,  Endurance{->B,e,  k,  Mainloop)  >  OA 
BigEnough(B,g,j,  e,  fc,  Mainloop)  A  Params.SampleRate  >  2 

Condition  II: 

3i,i  E  {True,  False}, 

£<7J  =  X5i5)J(Mainloop  —  1)  A  ygj  =  yBifl)J(Mainloop  —  1)A 

xek  =  x^B,e,jt(Mainloop  —  1)  A  yek  =  y_Bie)fc(Mainloop  —  1)A 

i  =  (Va,a','c,C',,,z',a  =  [P<mt^LltJ  A  «'  =  [pa^XDeitaJ  * 


=  U ^^k-^    Ac'=|E *4 


[  Params.YDelta. 


[_  Params.YDelta 


A 


z  =  Alt(a,  c,  xgj,  ygj)  A  z'  =  Alt(a! ,  c',  xek,  yek)A 
(Vn,  1  <  n  <  Params.SampleRate—  1, 

(Z\r    „    ~    „  _    n _        xgj  +  rx(re/c-rgi)  II  j/ffj+r xfyefc-ygj)  I 

(-*'  i^'V''  Params.SampleRate'^  [     Params.XDelta     J'^  [     Params.YDelta    J' 

(z  +  rx(z'-z))>  Alt(p,  q,  xgj  +  r  x  (xeA*  -  xyj),  y^j  +  r  x  (ye/:  -  ygj))))) 
Condition  III: 

(((~"0  A  Clear(B,g,j,e,  k,  Mainloop))  V  (i  A  ->Clear(B,g,j,  e,  k,  Mainloop))) A 

Obvious(B,g,j,  e,  A*,  Mainloop) A 

(V<,0  <  t  <  Duration,  t  ^  Mainloop  ->  -^EObserve(B,g,e,t)) 


6.4:  Program  infinite  loops  when  Duration=0 

Condition  I:True 
Condition  ILDuration  =  0 
Condition  IILTrue 
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6.5:  Improper  calculation  of  Available  Weapons 
Condition  I: 

Active(B,g)  A  Params.NumWTypes  >  OA 

3w,  1  <  w  <  Params.NumWTypes,  NumWeapon(B,g,  u>,  Mainloop)  >  OA 

3i,l  <  i  <  NumWeapon(B,g,w, Mainloop), 

(azS)5iUM  (Mainloop)  ^ooV  ayBl5,u,,i(Mainloop)  ^  oo 

Condition  II:True 
Condition  III: 

3e,  Active(->B,  e), 

(Vf,0  <  t  <  Mainloop,  -~<EObserve(B,g,e,t))  /\  EObserve(B,g,e,  Mainloop) h 

3k,  1  <  k  <  Army[->B,  e]. Squadrons,  Endurance(->B,e,  k,  Mainloop)  >  OA 

InRange(B,  g,  w,  e,  k,  Mainloop) A 

(Vu/,  1  <  w'  <  Params.NumWTypes,  u/  ^  w  — ► 

(->InRange(B,  g,  w' ,  e,  k,  Mainloop)  V  N umW eapon(B ,  5,  u/,  Mainloop)  <  0) 

6.6:   Divide  by  Zero  when  assigning  target  coordinates 
Condition  I: 

Active(B,g)  A  Active(-*B,  e)  A  Params.NumWTypes  >  OA 
EObserve(B,g,e,  Mainloop  —  1) 

Condition  II:  Num\Veapon(B,g,  1,  Mainloop)  <  0 
Condition  IILTrue 

6.7:  Non-reinitialized  pointer  in  SufferAttrition 
Condition  I: 

Active(B,  g)  A  Active(->B,  e)  A  Params.NumWTypes  >  0  A  Mainloop  >  2A 
3i,  1  <  i  <  Params.NumWTypes,  Army[5,^].Weapon[i].UseLimit  >  OA 
NumWeapon(B,g,i,  Mainloop)  >  0  A  Army [Z?,<7J. Weapon [ij.FireRate  >  OA 
Army[5,^].WeapPriority[e,  i]  >  OA 

3jr,  1  <  j  <  Army[B,  g]. Squadrons,  Endurance(B ,  g,j,  Mainloop  —  2)  >  OA 
3k,  1  <  k  <  Army[-iB,  e\. Squadrons,  Endurance^  B ,  e,  k,  Mainloop  —  2)  >  OA 
Observe(B,g,j,  e,  k,  Mainloop  —  2)  A  InRange(B,g,w,  e,  k,  Mainloop  —  2) 

Condition  ILTrue 
Condition  IILTrue 
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6.8:  Undefined  pointer  reference  in  SufferAttrition 
Condition  I: 

Active(B,  g)  A  Activc(-^B,  e)  A  Params.NumWTypes  >  0  A  Mainloop  >  2A 
3t,  1  <  i  <  Params.NumWTypes,  Army[.B,  <7J.Weapon[t].UseLimit  >  OA 
NumWeapon(B,  g,  i,  Mainloop)  >  0  A  Army[.B,  (7].Weapon[i].FireRate  >  OA 
Army[5,^].WeapPriority[e,i]  >  OA 

3j,l  <j  <  Army  [i?,<7].  Squadrons,  Endurance(B,  g,j,  Mainloop  —  1)  >  OA 
3k,  1  <  k  <  Army[-«B,  e]. Squadrons,  Endurance(-<B,  e,  k,  Mainloop  —  1)  >  OA 
Observe(B,g,j,  e,fc,  Mainloop  —  1)  A  InRange(B,g,w,e,  A;,  Mainloop  —  1) 

Condition  II:True 
Condition  III:True 

6.9:  No  initialization  of  Observations. NumObserved 

Condition  IiActiv e(B,  g)  A  Active(->B,  e)  A  EObserved(B,g,  e,  1) 
Condition  ILTrue 
Condition  II: 

Params.NumWTypes  >  OA 

3w,  1  <  w  <  Params.NumWTypes,  Army[5,g].WeapPriority[e,u;]  >  OA 
NumW eapon(B ,  g ,  w,2)  >  0  A  Army[5,  gj.Weaponfiyj.FireRate  >  OA 
Army[5,5r].Weapon[u»].UseLimit  >  OA 


Army[fl,flr].WeaponH.Range  >  J(XB<3(1)  -  A^,e(l))2  +  (YB>g(\)  -  Y^bMY 


6.11:  Command  message  improperly  dropped  from  Commands- 
Finished  list 
Condition  I: 

Active(B,g)  A  NCmsgs[B]  >  OA 

3m,  1  <  m  <  NCmsgs[5],  Mimp(B,g,rn,  Mainloop)  A  -*Mimp{B,  g,  m,  Mainloop  —  1)A 

3n,l  <  n  <  NCmsgs[Z?],m  <  n  A  Mimp(B,  g,  n,  Mainloop) A 

-^Mimp(B,g,n,  Mainloop  —  1)  A  Cmsgs[5,m]. Priority  >  Cmsgs[5,  n], Priority 

Condition  II:True 
Condition  IILTrue 
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6.12:  Substitution  of  ComJamEff  for  ComJamRadius 

Condition  I: 

Active(B,  g)  A  Active(-*B,  e)  A  NumRec(B,  g,  Mainloop)  >  OA 
(NCmsgs[5j  >  0  A  3m,  1  <  m  <  NCmsgs[J5], RecT(B,g,m)  =  Mainloop) V 
(Active(B,  f)  A  Army[£?,  /]. Report  =  g  A  NumSend(B,  /,  Mainloop)  >  OA 
SomeObserve(B,f,  Mainloop  —  RepT(B,f,g))  A  Army [-> B,  ej. Com JamEff  >  0 

Condition  II:Army[->B,  e]. ComJamEff  ^  Army [-<B,  ej. ComJamRadius 
Condition  IILTrue 

6.13:   Command  messages  implemented  in  destroyed  battalions 
Condition  I: 

3B,  B  e  {True,  False},  NArmy[£]  >  0  A  NCmsgs[£]  >  OA 

BMainloop,  1  <  Mainloop  <  Duration, 

3m,  1  <  m  <  NCmsgs[J5],l  <  Cmsgs[.B,  mj.Dest  <  NArmy[£]A 

s(B,  Cmsgs[5,  m].Dest,  Cmsgs[5,m].Time)  >  OA 

Mimp(B,  Cmsgs[i?,  m].Dest,  m,  Mainloop) A 

-*Mimp(B,  Cmsgs[5,  mj.Dest,  m,  Mainloop  —  1) 

Condition  II:s(B,  Cmsgs[5,  mj.Dest,  Mainloop)  <  0 
Condition  III:Cmsgs[i?,m].msg  ^  Army[5,  Cmsgs[5,  mj.Dest] 

6.14:  InOwnObsv  in  UpdateLL  is  not  initialized 
Condition  I: 

Active(B,  g)  A  Active(-<B,  e)  A  Active(B,  f)  A  Armyfi?,  /]. Report  =  gA 
3j,  1  <  j  <  Army[i?,  g}. Squadrons,  Endurance(B,g,  j,  Mainloop)  >  OA 
3/r,  1  <  k  <  Army[->B,  ej. Squadrons,  Endurance(->B,  e,  A:,  Mainloop)  >  OA 
Observe(B,  g.  j,  e,  /:,  Mainloop) A 
3*,0  <  t  =  Mainloop  -  RepT{B,f,g)  -  Army[£,#j.ProcDelay- 

Army[B,g].RecRate 

Num. Rec(B  ,g  ,Mainloop—  Army [B,p].ProcDelay) ' 

3j',  1  <  j'  <  Army[J9,  /j. Squadrons,  Endurance(B,  f,j',t)  >  OA 
Observe(B,  /,  j',  e,  k,  t) 

Condition  ILTrue 

Condition  III:A^Bie^(Mainloop)  ^  X^Btetk(t)  V  y^S)e)fc(Mainloop)  ^  K,B>Cifc(<) 
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6.15:  New  Army  not  updated  after  command  message 
Condition  I: 

Active(B,g)  A  Mainloop  =  Duration  A  NCmsgs[B]  >  OA 

3m,  1  <  m  <  NCmsgs[5],  Mimp(B,g,m,  Duration)  A  ->Mimp(B,g,m,  Duration  —  1) 

Condition  II:Cmsgs[5,m].msg  ^  Army[B,g] 
Condition  IILTrue 

6.16:  Observe  blocked  when  Params.SampleRate  =  2 
Condition  I: 

Active(B,  g)  A  Active(->B,  e)A 

3j,  1  <j  <  Army[B, g]. Squadrons,  Endurance(B,g,j,  Mainloop)  >  OA 
3k, 1  <  k  <  Army[-<i?,  e]. Squadrons,  Endurance^  B,e,  k,  Mainloop)  >  OA 
BigEnough(B,  g,j,e,k,  Mainloop) 

Condition  ILParams.SampleRate  =  2 
Condition  IILTrue 

6.17:  NumWeapons>0  when  Army. Weapon. FireRate=0 

Condition  I: 

Active(B,g)  A  Active{->B,  e)  A  Params.NumWTypes  >  OA 

3jf',  1  <  j  <  Avmy[B,  g]. Squadrons,  Endurance(B ,  g,j,  Mainloop)  >  OA 

3k,  1  <  k  <  Army[->5,  e]. Squadrons,  Endurance(-<B,  e,  k,  Mainloop)  >  OA 

Observe(B,  g,j,e,  k,  Mainloop  —  1 ) A 

3w,l  <w<  Params.NumWTypes,  N  umW  eapon{B ,  g ,  w,  Mainloop)  >  OA 

InRange(B,  g<  w,  e,  fc,  Mainloop)  A  Army[B,  ^].Weapon[iu].UseLimit  >  OA 

Army[i?,  <7].WeapPriority[e,u;]  >  0 

Condition  II:Army[5,p].Weapon[it'].FireRate  =  0 
Condition  III: 

flt,0  <  t  <  Duration, 

3j',  1  <  j'  <  Army[jB,  g]. Squadrons,  Endurance(B,g,j',t)  >  OA 

3k',  1  <  k'  <  Anny[-iB,  e). Squadrons,  Endurance(->B,  e,  k',t)  >  OA 

Observe(B,g,j',  e,  k',t  —  1)A 

3w' ,  1  <  u/  <  Params.NumWTypes,  Num Weapon ( _£?,#,  u/,i)  >  OA 

InRange(B,g,w',e,k',t)  A  Army[5,^].WTeapon[u''].UseLimit  >  OA 

Army[£?,c].WeapPriority[e,u/]  >  0  A  Army[i?,  o].Weapon[u/.FireRate  >  0 
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6.18:  Report  messages  blocked  by  bad  condition 
Condition  I: 

Active(B,  g)  A  Active(->B,  e)  A  Active(B,  f)  A  Army[J3,  /]. Report  =  g/\ 
3t,0  <t  ==  Mainloop  -  RepT(B,f,g)  -  Army[£,p].ProcDelay- 

Army[B,g].RecRate 


N urn Rec(B ,g ,Malidoop—  Army[B,5].ProcDelay) ' 

EObserve(B,  /,  e,  t  -  1)  A  NumSend{B,  /,  t)  >  0  A  Army[J3,  /j.ObsXpire  >  0 

Condition  ILTrue 

Condition  III:^*',0  <  t'  <  Duration,  EObserve(B,g,e,t') 

6.20:   Destroyed  battalions  not  initialized 

Condition  LTrue 
Condition  II: 

3B,B  €  {True,  False},  NArmy[£]  >  OA 

3<7,  1  <  g  <  NArmy[£?],  Army[i?,#]. Squadrons  <  0 

Condition  ILTrue 

6.23:  UseLimit  not  checked  until  after  first  weapon  use 
Condition  I: 

Aciive(B,g)  A  Active(-<B,  e)  A  Params.NumWTypes  >  OA 

3j,  1  <  j  <  Army[5,  g]. Squadrons,  E7idurance(B,g,j,  Mainloop)  >  OA 

3A:,  1  <  k  <  Army[-iB,  ej. Squadrons,  Endurance(-~<B,  e,  k,  Mainloop)  >  OA 

Observe(B,g,j,  e,  fc,  Mainloop  —  1)A 

3u>,  1  <  w  <  Params.NumWTypes,  NumWeapon(B,g,  w,  Mainloop)  >  OA 

InRange(B,g,  w,  e,  A-,  Mainloop)  A  Army [B,g). Weapon [u;].FireRate  >  OA 

Army[i?,  g].WeapPriority[e,  w]  >  0 

Condition  II:Army[i3, gj.Weaponfu;]. UseLimit  =  0 
Condition  III: 

,3/,0  <  t  <  Duration, 

3j',  1  <  j'  <  Army[B,  g\. Squadrons,  Endurance(B,g,  j',  t)  >  OA 

3k\l  <  k'  <  Avmy[-'B,  e]. Squadrons,  Endurance(-<B,  e,  k',t)  >  OA 

Observe(B,g,j',  e,  k',  t  —  1)A 

3w',  1  <  w'  <  Params.NumWTypes,  Ar umWeapon{B,  g,w',t)  >  OA 

InRange(B,g,w',e,  k'  ,t)  A  Army [B,  <7J.Weapon[u/]. UseLimit  >  OA 

Army[i?,<7].WeapPriority[e,ix/]  >  0  A  Army[j9,  <7J.Weapon[u>'.FireRate  >  0 
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6.24:  Available  processors  don't  include  just  finished  commands 
and  reports 
Condition  I: 

Active(B,g)  A  ((NCmsgs[B]  >  OA 

3m,  1  <  m  <  NCmsgs[5],  Mimp(B,g,m,  Mainloop)A 

-iMirnp(B,g,m,  Mainloop  —  1))V 

(Active(B,  f)  A  Activ e(->B,  e)  A  Army{B,  /]. Report  =  gA 

3t,0  <  t  =  Mainloop  -  RepT(B,f,g)  -  Army[Z?,p].ProcDelay- 

Army[B,g].RccFUte 

NumRec(B,g .Mainloop—  Army [B ,g] .ProcDelay) ' 

EObserve(B,f,e,t-  1)  A  NumSend{B,  f,t)  >  0)) 

Condition  II: 

CmdSum(B,g,  —  1,  Mainloop)  -j-  ReptSum(B,g,  —1,  Mainloop) 
>  NumProcess(B,g,  Mainloop) 

Condition  IILTrue 
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Failure  Regions  in  Version  7 


7.1:  VisableSquad  return  upredictable  on  destroyed  squadrons 

Condition  I:Active(B,g)  A  Active(->B,  e) 
Condition  II: 

(3j,  1  <  j  <  Army[J9,  g). Squadrons,  Endurance(B,  <7,j,  Mainloop)  <  0)V 
(3k, 1  <  k  <  Army[-<f?,  e]. Squadrons,  Endurance(->B,e,  k,  Mainloop)  <  0) 

Condition  III:  ,3^,0  <  t  <  Duration,  EObserve(B,g,e,t) 

7.2:  Division  by  zero  Num Weapon  in  InflictAttrition 
Condition  I: 

Active(B,g)  A  Active(->B,e)  A  Params.NumWTypes  >  0A 

3k,  1  <  k  <  Army[-i5,  e]. Squadrons,  Endurance(-*B ,  e,  k,  Mainloop  —  2)  >  0A 

(3j,  1  <  j  <  Army[5,  e]. Squadrons,  Endurance(B ,  g ,  j ,  Mainloop  —  2)  >  0A 

Observe(B,g,j,  e,  k,  Mainloop  —  2))A 

3w,l  <  w  <  Params.NumWTypes,  InRange(B,g,  w,  e,  k,  Mainloop  —  1)A 

Army[5,^].WeapPriority[e,  w)  >  0  A  NumWeapon(B,g,  w,  Mainloop  —  1)  >  0A 

Army[B,^].Weapon[u'].FireRate  >  0  A  Army[5,^].Weapon[w].UseLimit  >  0 

Condition  II:  N  um\V  eapon(B ,  g,  w,  Mainloop)  =  0 
Condition  IILTrue 

7.3:Division  by  zero  NumObservArray  in  InflictAttrition 
Condition  I: 

Active(B,g)  A  Active(->B,  e)  A  Params.NumWTypes  >  0A 

3k,  1  <  k  <  Army[->5,  e]. Squadrons,  Endurance(->B,  e,  k,  Mainloop  —  2)  >  0A 

(3j,  1  <  j  <  Army[5,  e]. Squadrons,  Endurance(B,g,j,  Mainloop  —  2)  >  0A 

Observe(B,g,j,  e,  k,  Mainloop  —  2))A 

3w,  1  <  w  <  Params.NumWTypes,  InRange(B,g,  w,  e,  k,  Mainloop  —  1)A 

Army[5,  <7J.WeapPriority[e,  w)  >  0  A  NumWeapon(B,g,  w,  Mainloop)  >  0A 

Army[5,$r].Weapon[tu].FireRate  >  0  A  Army[i?, #].Weapon[u;].UseLimit  >  0 

Condition  II:^EObserve(B ,  g,  e,  Mainloop) 
Condition  IIIrTrue 
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7.4:  Bad  count  of  busy  command  processing  squadrons 
Condition  I: 

Active{B,g)  A  ((NCmsgs[#]  >  OA 

3m,  1  <  m  <  NCmsgs[5],jVfomp(J3,sr,m,  Mainloop) A 

-iMtmp(i?,<7,m,  Mainloop  —  1))V 

(Active(B,  f)  A  Active(-iB,  e)  A  Army[5,  /]. Report  =  gA 

3t,0  <t  =  Mainloop  -  RepT{B,f,g)  -  Army[5,^].ProcDelay- 

Army[B,g].RecRate 

N"umRec(B,g , Mainloop—  Army [B,p].ProcDelay)  ' 

EObserve(B,f,e,t-  1)  A  NumSend{B,  f,t)  >  0)) 

Condition  II: 

CrndSum(B,g,  —1,  Mainloop)  +  ReptSum(B,g,  —1,  Mainloop) 
>  NumProcess(B,g,  Mainloop) 

Condition  IILTrue 

7.5:  Bad  check  in  Observation 

Condition  I:Active(B,  g)  A  Active(-<B,  e)  A  EObserve(B,  g,  e,  Mainloop) 
Condition  II:  Active(B,  f)  A  /  >  g  A  EObserve(B,  /,  e,  Mainloop) 
Condition  III: 

/3^,1  <  £  <  Duration,  EObserve(B,  f,  e,2)A 
V/',l  <  /'  <  f^EObserve(B,f\e,t) 


7.6:  Bad  condition  on  NArmy  check 

Condition  LDuration  >  0 

Condition  11:35,  B  €  {True,  False},  NArmy[J9]  =  0 

Condition  IILTrue 

7.7:  Improperly  rejected  ObsXpire=0 

Condition  LDuration  >  0  A  3B,B  €  {True,  False},  NArmy[£]  >  0 
Condition  11:30,1  <  g  <  NArmy[5],  Army[£,5].ObsXpire  =  0 
Condition  III:True 

7.8:  Improperly  rejected  ProcDelay=0 

Condition  LDuration  >  0  A  35,  B  €  {True,  False},  NArmy[5]  >  0 
Condition  IL3y,  1  <  g  <  NArmy[£],  Army[£,5].ProcDelay  =  0 
Condition  IILTrue 
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7.9:  No  report  communication 
Condition  I: 

Active(B,g)  A  Active(-*B,e)  A  Active(B ,  /)  A  Army[5, /]. Report  =  g/\ 
3t,0  <t  =  Mainloop  -  RepT(B,f,g)  -  Army[5,#].ProcDelay- 

Army[5  ,g]  .RecRate 


NumReceive(B ,  g,  Mainloop— Army  [B,s].ProcDelay ' 

EObserve(B,  /,  e,  t  -  1)  A  NumSend(B,  /,  t)  >  0  A  Army^,  /j.ObsXpire  >  0 

Condition  II:True 

Condition  IIL^',0  <  t'  <  Duration,  EObserve(B,g,e,t') 

7.10:  Misplaced  reinitialization  of  variable  in  Observation 

Condition  I:Active(B,g)  A  Active(->B,  e) 
Condition  II: 

3fc,  1  <  k  <  Army[->5,  ej. Squadrons,  Endurance(-*B,  e,  &,  Mainloop)  >  OA 
(3j,  1  <j<  Army[5,  y]. Squadrons,  Endurance(B,g,j,  Mainloop)  >  OA 
Observe(B,g,j,  e,  /:,  Mainloop)) A 

3 A-',  A-  <  k'  <  Army[-iJ5,  e]. Squadrons,  Endurance(-iB,  e,  fc'Mainloop)  >  OA 
(3j',  1  <  j'  <  Army[J3,  g]. Squadrons,  Endurance(B ,  g ,  j' ,  Mainloop)  >  OA 
Observe(B,g,j',  e,  &',  Mainloop)) 

Condition  III: 

Params.NumWTypes  >  0  A  Mainloop  +  1  <  DurationA 

3w,  1  <  w  <  Params.NumWTypes,  NumWeapon(B,g,  w,  Mainloop  +  1)  >  1A 
Army[i3,  g].Weapon[u;].FireRate  >  0  A  Army[5,^].Weapon[ty].UseLimit  >  OA 
Army[J9,  <7].WeapPriority[e,  w]  >  1A 

urance{-^   ,e,  ,    ai   oop+i)  <-  Army[i?,  g] .Weapon[to] .Damage  +  Army[-il?,  ej.Wear 
<  Endurance(-iB,  e,  fc,  Mainloop  -f  1) 


7.11:   Segmentation  Violation  if  battalion  leaves  terrain  grid 

Condition  I:(Duration  >  0) 
Condition  II: 

35,  g,Active(B,g)A 

(XBtg  <  0  V  YB,g  <  0) 

Condition  IILTrue 
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7.12:  Restoration>0  after  FixSuppl=0 

Condition  I:Active(B,  g)  A  NumCas(B,g,  Mainloop  -  1)  >  0 
Condition  II:Suppl(B,g,  Mainloop  -  2)  <  0 
Condition  III: 

3/,  1  <  j  <  Army[i?, g). Squadrons, 

*-'t»«l-f'-'«1  <  £n<Wce(B,5,,,  Mainloop-  1)  -  NtTji!^tlZ% 

7.13:  Wrong  variable  on  loop  in  Observation 

Condition  I:Active(B,g) 

Condition  II:NArmy[£]  ^  NArmy[-.£] 

Condition  III: 

(NArmy[£]  >  NArmy[-£])V 

(NArmy[£]  <  NArmy[-i£]A 

3e,NArmy[5]  <  e  <  NArmy[-<J9],  Active(-^B,  e)A 

EObserve(B,  g,  e,  Mainloop)) 


7.14:   Command  with  0  squadrons  doesn't  destroy  battalion 
Condition  I: 

Active(B,g)  A  NCmsgs[£]  >  OA 

3m,  1  <  m  <  NCmsgs[5],  Mimp(B,g,  m,  Mainloop)  A  ->Mimp(B,  g,  m,  Mainloop  —  1) 

Condition  II:Cmsgs[5,  mj.msg. Squadrons  =  0 
Condition  IILTrue 

7.15:  NumWeaponToUse  not  initialized 

Condition  I:Active(B,g)  A  Active(->B,  e)  A  EObserve(B,g,  e,  Mainloop) 

Condition  II:True 

Condition  IILMainloop  <  Duration  —  1 

7.16:  Does  not  reject  Army.NumFixers  >  Army.Squadrons 

Condition  I:(Duration  >  0) 
Condition  II: 

(3J9,£e  {l...NArmy[true]}, 

Army[true,  i?].NumFixers  >  Army[true,  £]. Squadrons)  V 
(3B,B  €  {l...NArmy[false]}, 

Army[false,  5].NumFixers  >  Army  [false,  B].  Squadrons) 

Condition  IILTrue 
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7.17:  Does  not  reject  Army.NumJammers  >  Army. Squadrons 

Condition  I:(Duration  >  0) 
Condition  II: 

(3B,B  €  {l...NArmy[true]}, 

Army[true,  B]. Num Jammers  >  Army[true,  B\. Squadrons) V 
(3B,B  G  {l...NArmy[false]}, 

Army  [false,  B].  Num  Jammers  >  Army  [false,  B\.  Squadrons) 

Condition  IILTrue 

7.18:  Does  not  reject  Army.NumProcess  >  Army. Squadrons 

Condition  I:(Duration  >  0) 
Condition  II: 

(3B,B  £  {l...NArmy[true]}, 

Army[true,  5].NumProcess  >  Army[true,  5].  Squadrons)  V 
{3B,B  e  {l...NArmy[false]}, 

Army  [false,  B],  NumProcess  >  Army  [false,  B],  Squadrons) 

Condition  III:True 

7.19:  Does  not  reject  Army.NuniReceive  >  Army. Squadrons 

Condition  I:(Duration  >  0) 
Condition  II: 

(3B,B  e  {l...NArmy[true]}, 

Army  [true,  5].NumReceive  >  Army[true,  B].  Squadrons)  V 
(3B,B  e  {l...NArmy[false]}, 

Army[false,  5].NumReceive  >  Army[false,  B). Squadrons) 

Condition  IILTrue 

7.20:  Does  not  reject  Army.NumSend  >  Army.Squadrons 

Condition  I:(Duration  >  0) 
Condition  II: 

(3B,B  £  {l...NArmy[true]}, 

Army[true,B].NumSend  >  Army[true,  B], Squadrons) V 
(3B,B  £  {l...NArmy[false]}, 

Army  [false,  B].  NumSend  >  Army  [false,  B].  Squadrons) 

Condition  III:True 
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7.21:  Does  not  reject  Cmsgs.msg.NumFixers  > 
Cmsgs.msg.  Squadrons 
Condition  I: 

3B,        B  6  {true, false}, 
(3/.1  <  /  <  NArmy[J3], 

(3m,  m  6  {l...NCmsgs[B]},  Mimp(B,  f,m,  Duration))) 

Condition  II: 

Cmsgs[i?,  mj.msg. NumFixers  >  Cmsgs[i?,  mj.msg. Squadrons 
Condition  III:True 

7.22:Does  not  reject  Cmsgs.msg. NumJammers  > 
Cmsgs.msg. Squadrons 
Condition  I: 

3B,        B  e  {true, false), 
(3/,l  <  /  <  NArmy[5], 

(3m,  m  6  {l...NCmsgs[£?j},  Mimp(B,f,m,  Duration))) 

Condition  II: 

Cmsgs[B,  mj.msg. NumJammers  >  Cmsgs[5,  mj.msg. Squadrons 
Condition  IILTrue 

7.23:   Does  not  reject  Cmsgs.msg. NumProcess  > 
Cmsgs.msg. Squadrons 
Condition  I: 

3B,        B  e  {true, false), 
(3/,l  <  /  <  NArmy[B], 

(3m,  m  €  {l...NCmsgs[JBj},  Mimp(B,f,m,  Duration))) 

Condition  II: 

Cmsgs[£,  mj.msg. NumProcess  >  Cmsgs[Z?,  mj.msg. Squadrons 

Condition  IILTrue 
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7.24:  Does  not  reject  Cmsgs.msg.NumReceive  > 
Cmsgs.msg. Squadrons 
Condition  I: 

3£,        B  E  {true, false}, 
(3/,l  <f<  NArmy[£], 

(3m,  m  E  {l...NCmsgs[i?]},  M2mp(£?,/,m,  Duration))) 

Condition  II: 

Cmsgs[i?,m].msg.NumReceive  >  Cmsgs[i?,m].msg. Squadrons 

Condition  IILTrue 

7.25:Does  not  reject  Cmsgs.msg. NumSend  > 
Cmsgs.msg. Squadrons 

Condition  I: 

3B,        B  €  {true, false), 
(3/,l  <f<  NArmy[£], 

(3m,  m  £  {l...NCmsgs[i?]},Afimp(i5,/,  m,  Duration))) 

Condition  II: 

Cmsgs[B,777J.msg. NumSend  >  Cmsgs[i?,m].msg. Squadrons 

Condition  III:True 

7.27:   Divide  by  zero  KF  in  CalcNumWeapToUse 

Condition  I: 

Active(B,g)  A  Active(->B,  e)  A  Params.NumWTypes  >  OA 
3u>,  1  <  w  <  Params.NumWtypes,  NumWeapon(B,g,w,Ma.m\oop)  >  OA 
3j,  1  <  j  <  Army[B,  g], Squadrons,  Endurance(B,g,j,  Mainloop)  >  OA 
3k,  1  <  k  <  Avmy[->B,  e]. Squadrons,  Endurance(->B,  e,  k,  Mainloop)  >  OA 
Observe(B,g,j,  e,  k,  Mainloop  —  1)  A  InRange(B,g,w,e,  k,  Mainloop  —  1) 

Condition  II:Army[.£?,  gj.Weaponftuj.FireRate  =  0 
Condition  III:True 
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7.28:  Number  Variables  exceed  initial  values 

Condition  I:Active(B,g)  A  NumCas(B,g,  Mainloop  —  1)  >  0 

Condition  II:s(B,g,  Mainloop)  <  NurnCas(B, g,  Mainloop—  l)  —  NumCas(B,g,  Mainloop) 

Condition  IILTrue 

7.29:  Double  increments  of  Weapon  and  Target  index 
Condition  I: 

Active(B,  g)  A  Activ e(->5,  e)  A  Params.NumWTypes  >  0  A  Mainloop  >  2A 
3j,  1  <  j  <  Aiiay[B,g].Sq\i&dTOiis,Endurance(Big, j, Mainloop)  >  OA 
3k,  1  <  /:  <  Army[-«5,  e]. Squadrons,  Endurance(->B,  e,  fc,  Mainloop)  >  OA 
3w,l  <  w  <  Params.NumWTypes,  NumWeapon {B,g,  w,  Mainloop)  >  1A 
Observe(B,g,j,  e,  k,  Mainloop  —  2)  A  InRange(B,g,w,  e,  fc,  Mainloop  —  1)A 
Army[5,^].WeapPriority[e,  w]  >  1  A  Army[£,  (7].\Veapon[u>].UseLimit  >  OA 
Army[.£?,<7].Weapon[u;].FireRate  >  0 

Condition  II: 

3?',  1  <  j'  <  Army[i?,  #]. Squadrons,  Endurance(B,g,j',  Mainloop  —  2)  >  OA 
Observe(B,g,j',  e,  /:  —  1,  Mainloop  —  2) 

Condition  III:Army[5, #]. Weapon [i^]. Damage  >  0 
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7.32:  Numeric  Precision  fault  in  Series 

Condition  I: 

Active(B,  g)  A  Active(-^B,  e)  A  Params.SampleRate  >  2A 
3j,  1  <  j  <  Army[J9,  g\. Squadrons,  Endurance(B,  g,j,  Mainloop)  >  OA 
3k,  1  <  k  <  Army[->B,  e]. Squadrons,  Endurance{->B,e,  /:,  Mainloop)  >  OA 
BigEnough(B,g,j,e,  A;,  Mainloop) 

Condition  II: 

log2 (Params.SampleRate)  ^  [log2(Params.SampleRate)J 

Condition  III: 

xgj  =  iB)5ij(Mainloop  —  1)  A  yyj  =  ysi5ij(Mainloop  —  1)A 
xek  =  x-,B,eijt(Mainloop  —  1)  A  yek  —  y_,S)eifc(Mainloop  —  1)A 


(\/a,a',c,c',z,z',a  =    P&rJ?( 


Params.XDelta 


Ao'  = 


xek 


Parentis. XDe 


u~\  A 

ltaj 


c  -  I mi I  a  c'  =  I *£ I  A 

C  ~~    L  Params.YDeltaJ   /N  C  [Params.YDeltaJ  /x 

z  =  Alt(a,  c,  xgj,  ygj)  A  z'  =  A/2(a',  c',  ze/c,  yek)A 
(Vn  1  <  n  <  2l-log2(ParamsSarnpleFUte)-l  _  i 

(Jr,  p,  <^,  X    ,  y    ,  r    =     2[log2(P*rams.SampleRatc)J  _j  5 

x'  =  zyj  +  r  x  (xefc  -  xgj),y'  =  ygj  +  r  x  (yefc  -  yyj), 


P 


=  1 


Params.XDelta 


J.«-l 


Params.YDeltaJ  ' 


(z  +  rx(z'~  z))  >  Alt(p,  q,  x',  y') 
)    )       A 

«B  I(a'  ,c'  ,xek,yek)  —  Army[-i.B,e],SquadIntensity[k] 
B I  (a', c', xek, yek)  ~ 


^2  Llog2(Params.SampleRate)J 


(0™( 


nx(refe— rgj) 


nx(yefc-ygj) 


-rni   v  nX(refc-rgJ)  7//19-   v  nx(yefc-ygj)  M^nlnnr^   V 

•LyJ    *•     2Llo82(p*r»ms  SampleRa«t)J  )  i)}Jj    *•    2  [iog2(P"iLmt  SampleRaie)J  5  "l«UUlUUpi    /*, 

Army  [5,  y].VWEffect)+ 


NArmy[-.B] 

£ 

e'  =  l 


0      if 


(x^B,A Mainloop  -  1)  -  xgj  x  2[l062^*i?s^JpLJiLe)j  _t )  + 

\  (y-,s,e' (Mainloop  -  1)  -  yyj  x  2[log2(P?*iv.es\~vplJLe)J  _i ) 
>  Army[-iB,  e'j.ObsJamRadius 


(z-b,c'( Mainloop  -  1)  -  xyj  x  - psi^ferSSk^] )  + 
\  (y^B,e'(Mainloop  -  1)  -  ygj  x  2 psng^^^^ggg] ) 

Army[-iS,e'].Obs  Jam  Radius 

x  Army[->J3,  e'j.ObsJamEff  otherwise 
)    )  <  Army[5,y].ObsMinContrast[j])) 
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7.33:  Undefined  value  when  battalion  leaves  terrain  grid 

Condition  I:(Duration  >  0) 
Condition  II: 

3B,  g,Active(B,  g)A 

(Xfi)5(Mainloop)  >  Params.XDelta  x  MaxTerrainV 
Ybi5(  Mainloop)  >  Params.YDelta  x  MaxTerrain) 

Condition  III:True 

7.35:  Invalid  expiration  of  observations 

Condition  I:Active(B,g)  A  Active(-^B,  e)  A  EObserve(B,  g,  e,  Mainloop) 
Condition  II:Army[i?,  gj.ObsXpire  <  2 
Condition  III: 

Mainloop  <  Duration  —  1  A  Params.NumWTypes  >  0A 

3u>,  1  <  w  <  Params.NumWTypes,  NumWeapon(B,g,  to,  Mainloop  4-  1)  >  0A 
Army[.5,  (?].WeapPriority[e,u;]  >  0  A  Army[i?,  <7J.Weapon[u>].UseLimit  >  0A 
Army[5,^].Weapon[tt']. Range  >  0  A  Avmy[B , g].Wea.pon[w]. Damage  >  0A 
Army[B,5J.Weapon[u»].FireRate  >  0 
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Failure  Regions  in  Version  8 


8.1:  Divide  by  zero  in  UpdateKA 
Condition  I: 

Active{B,g)  A  Active(->B,  e)  A  Params.NumWTypes  >  OA 

3j,  1  <  j  <  Army[5,  g]. Squadrons,  Endurance(B,g,j,  Mainloop)  >  OA 

3fc,  1  <  k  <  Army[->i?,  e]. Squadrons,  Endurance(-yB,  e,  k,  Mainloop)  >  OA 

Observe(B,g,j,  e, /;,  Mainloop)  A 

3tu,  1  <  it)  <  Params.NumWTypes,  NumWeapon(B,g,  u>,  Mainloop)  >  OA 

InRange(B,g,w,  e,  fc,  Mainloop)  A  Army[B,^].Weapon[it;].FireRate  >  OA 

Army[i?,<7].WeapPriority[e,u']  >  0 

Condition  II:Army[i?,#].Weapon[tu].UseLimit  =  0 
Condition  IILTrue 

8.2:  Divide  by  zero  in  SquadPos 

Condition  I:Active(B,g) 
Condition  II: Army [£?,(?]. Grow  =  0 
Condition  IILTrue 

8.3:   No  check  on  send  time  for  equal-priority  messages  at  start 
of  queue 

Condition  I:Active(B,g)  A  NCmsgs[i?]  >  1 
Condition  II: 

3m,  1  <  m  <  NCmsgs[5],  Mimp(B,g,m,  Mainloop)  A  -<Mimp(B,g,  m,  Mainloop  —  1)A 
3n,  1  <  n  <  NCmsgs[B],  Mimp(B,g,n,  Mainloop)  A  -*Mimp(B,g,  n,  Mainloop  —  1)A 
Cmsgs[i3,  m]. Priority  =  Cmsgs[5,n]. Priority  A  Cmsgs[i?,m].Time  <  Cmsgs[i?,n].TimeA 
Cmsgs[5,  m].msg  ^  Cmsgs[£?,  nj.msg 

Condition  III: 

ft™',  1  <  m'  <  NCmsgs[5],  Mimp(B,g,m',  Duration)  A  -iMimp(B,g,  m\  Mainloop) 
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8.4:  Pointer  past  end  of  list  in  PutQue 
Condition  I: 

Active(B,g)  A  NCmsgs[£]  >  1A 

3m,  1  <  m  <  NCmsgs[£],  Cmsgs[£,  m].Dest  =  gA 

RecT(B,g,m)  <  Mainloop  A  -iMimp(B,g,m,  Mainloop)A 

3n,l  <  n  <  NCmsgs[5],Cmsgs[£,  ri]. Dest  =  gA 

RecT{B,g,n)  =  Mainloop  A  Cmsgs[B,m]. Priority  =  Cmsgs[5,  n). Priority 

Condition  II: 

jBm',1  <  m'  <  NCmsgs[£],Cmsgs[JB,m'].Dest  =  gA 
m'  ^  m  A  m'  ±  n  A  RecT(B,g,m')  <  Mainloop)A 
-iMimp(B,  g,  m',  Mainloop) 

Condition  III:True 

8.5:  Infinite  loop  in  InsertMsg 
Condition  I: 

Active(B,g)  A  NCmsgs[£]  >  1A 
3m,  1  <  m  <  NCmsgs[l?],Cmsgs[i?,m].Dest  =  gA 
RecT(B,g,m)  <  Mainloop  A  ->Mimp(B,g,m,  Mainloop) A 
3n,  1  <n<  NCmsgs[£?],Cmsgs[i?,n].Dest  =  gA 
RecT(B,g,n)  =  Mainloop 

Condition  II:Cmsgs[5,  m]. Priority  <  Cmsgs[Z?,  n]. Priority 
Condition  IILTrue 

8.6:  No  check  on  send  time  for  equal-priority  messages  in  middle 
of  queue 

Condition  I:Active(B,g)  A  NCmsgs[5]  >  2 
Condition  II: 

3m,  1  <  m  <  NCmsgs[5],  Mirnp(B,g,m,  Mainloop)  A 

->Mimp(B,  g,  m,  Mainloop  —  1)A 

3n,  1  <  n  <  NCmsgs[.B],Mzmp(i?,<7,n,  Mainloop) A 

-iMimp(B,  g,n,  Mainloop  —  1)A 

3m',  1  <m'<  NCmsgs[B],  Mimp(B,g,m',  Mainloop)A 

-<Mirnp(B,  g,  m',  Mainloop  —  1)A 

Cmsgs[£?,m']. Priority  >  Cmsgs[5,m]. Priority  A  Cmsgs[£?,  m]. Priority  =  Cmsgs[£?,n]. Priority  A 

Cmsgs[B,  mj.Time  <  Cmsgs[B,  nj.Time  A  Cmsgs[B,  mj.msg  ^  Cmsgs[i?,  rcj.msg 

Condition  III: 

,3m',  1  <m'<  NCmsgs[B],  Mimp(B , g ,m' ,  Duration)  A  ->Mimp(B,g,m' , Mainloop) 
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8.7:  NC  not  zeroed  on  reciept  of  command  message 

Condition  I: 

Active(B,g)  A  NCmsgs[£]  >  OA 

3m,  1  <  m  <  NCmsgs[i?],  Mimp{B, g,  m,  Mainloop)  A  ->Mimp(B,g,m,  Mainloop  —  1) 

Condition  II:  NumCas(B,g,  Mainloop)  >  0 
Condition  III: 

,3n,l  <  n  <  NCmsgs[B],  Mimp(B,g,n,  Duration)  A  -<Mimp(B, g,  m,  Mainloop) 


8.8:   Segmentation  violation  when  squadron  is  off  terrain  grid 

and 

8.10:  Infinite  loop  in  CalcBI 

Condition  I:Active(B,g)  A  Active(->B,  e) 
Condition  II: 

3j,  1  <  J  <  Army[B, g). Squadrons,  Endurance(B,g,  j,  Mainloop)  >  OA 
{XB,g,j (Mainloop)  <  0  V  Yb>5J  (Mainloop)  <  0) 

Condition  IILTrue 

8.9:   Observation  blocked  if  first  squadron  destroyed 

Condition  I:Active(B,g)  A  Active(->B,  e) 
Condition  II: Endurance(B,g,  1,  Mainloop)  <  0 
Condition  III: 

3j,  1  <  j  <  Army[B,  g\. Squadrons,  Endurance(B,g,j,  Mainloop)  >  OA 

3k, 1  <  k  <  Army[->5,  e]. Squadrons,  Endurance(->B,  e,  k,  Mainloop)  >  OA 

Observe(B,g,j,  e,  k,  Mainloop) A 

(jBt,0  <t  <  Ma.m\oop,EObserve(B,g,e,t))A 

( fif,  Active{B,  /),  Army[£,  /]. Report  =  #A 

3t,0<t  =  Mainloop  -  RepT(B,f,g)  -  Army[£,#].ProcDelay- 

Army[.B,g].RecRate 

N umRec(B ,g ,MaJnloop—  Army[S,s].ProcDelay) ' 

EObserve(B,  f,  e,  t) 
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8.11:  Excessive  length  loop  in  CalcBI 

Condition  I:Active(B,g)  A  Active(-iB,  e) 
Condition  II: 

3j,  1  <  j  <  Army[5, 5]. Squadrons,  Endurance(B,g,  j,  Mainloop)  >  OA 
(Aj3iSJ(Mainloop)  >  MaxTerrain  x  Params.XDeltaV 
yfipj(Mainloop)  >  MaxTerrain  x  Params.YDelta) 

Condition  IILTrue 

8.12:  No  check  if  RA  <  0 
Condition  I: 

Active(B,g)  A  ((NCmsgs[5]  >  OA 

3m,  1  <  m  <  NCmsgs[i?],  Cmsgs[£?,  mj.Dest  =  g  A  RecT(B,  g,  m)  =  Mainloop)V 

(Active(B,  f)  A  Active(-*B,  e)  A  Army[#,  /]. Report  =  gA 

EObserve(B,  /,  e,  Mainloop  -  RepT{B,  /,  5)))) 

Condition  II: NumRec(B,g,  Mainloop)  <  ComJam(B,  g,  Mainloop) 
Condition  IILTrue 

8.13:  Always  engaged  if  observation  is  within  range 
Condition  I: 

Active(B,  g)  A  Active(->B,  e)  A  Params.NumWTypes  >  OA 
3j,  1  <  j  <  Avmy[B,  g). Squadrons,  Endurance(B,g,j,  Mainloop)  >  OA 
3k,  1  <  k  <  Armyf-i^,  e]. Squadrons,  Endurance(->B,  e,  A:,  Mainloop)  >  OA 
Observe(B,g,j,  e,k,  Mainloop) 

Condition  II: 

Vtf ,  I "<  iy  <  Params.NumWTypes,  InRange(B,  g,  w,  e,  A:,  Mainloop)  — > 
(NumWeapon (B,  g,w,  Mainloop)  <  0  V  Army[5,^].WeapPriority[e,  w)  <  OV 
Army[5,^].Weapon[i^].FireRate  <  0  V  Army[5,g].Weapon[u'].UseLimit  <  0) 

Condition  IILTrue 

8.14:   Divide  by  zero  in  OJ  calculation 
Condition  I: 

Active(B,  g)  A  Active(->B,  e)  A  Params.SampleRate  >  2A 
3j,  1  <  j  <  Army[B,  #]. Squadrons,  Endurance(B,g,j,  Mainloop)  >  OA 
3k,  1  <  A-  <  Army[->J3,  e]. Squadrons,  Endurance(->B,  e,  k,  Mainloop)  >  OA 
BigEnough(B,g,j,e,  k,  Mainloop)  A  Clear(B,g,j,  e,  k,  Mainloop) 

Condition  IL3e',  >lch'ue(-«JB,  e'),  Army[^£,  e'j.ObJamRadius  =  0 
Condition  IILTrue 
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8.15:  Version  does  not  observe  when  Params.SampleRate  =  2 
Condition  I: 

Active(B,  g)  A  Act ive(-*B,  e) 

3j,  1  <  j  <  Army[i?, g]. Squadrons,  Endurance(B, <7,j,  Mainloop)  >  OA 
3k,  1  <  A:  <  A rmy[-ii?,e]. Squadrons,  Endurance(->B,  e,  k,  Mainloop)  >  OA 
Big  Enough(B ,  g ,  j ,  e,  k,  Mainloop) 

Condition  II:  Params.SampleRate  =  2 
Condition  IILTrue 

8.18:  Destroyed  battalions  still  move 

and 

8.35:  Velocity  undefined  if  battalion  destroyed 

Condition  LDuration  >  2  A  3B,B  €  {True,  False},  NArmy[£]  >  0 
Condition  II: 

3#,1  <  g  <  NArmy[5],3<,0  <  t  <  Duration-  1, s{B,g,t)  =  0 

Condition  IILTrue 

8.19:  Version  observes  when  Params.SampleRate  <  2 

and 

8.39:  Divide  by  zero  in  FindPoints 
Condition  I: 

Active(B,g)  A  Active(->B,e) 

3j,  1  <  j  <  Army[J9,  g], Squadrons,  Endurance(B,g,  j,  Mainloop)  >  OA 
3k,  1  <  k  <  Army[->i?,  e]. Squadrons,  Endurance(-^B,  e,  A:,  Mainloop)  >  OA 
BigEnough(B,g,j,e,  k,  Mainloop) 

Condition  ILParams.SampleRate  <  2 
Condition  IILTrue 

8.23:  Use  of  0  as  flag  conflicts  with  position  in  width 

Condition  I:Active(B,g) 
Condition  II: 

3j,  1  <  j  <  Army[J3,  g], Squadrons,  Endurance(B,g,  j,  Mainloop)  >  OA 
XB,g,j (Mainloop)  <  0 

Condition  III:Mainloop  =  Duration  —  1 
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8.25:  Does  not  reject  Army.NumFixers  >  Army. Squadrons 

Condition  I:(Duration  >  0) 
Condition  II: 

{3B,B  e  {1...N  Army  [true]}, 

Army[true,  £].NumFixers  >  Army[true,  B). Squadrons) V 
{3B,Be  {l...NArmy[false]}, 

Army  [false,  £].NumFixers  >  Army  [false,  B).  Squadrons) 

Condition  IILTrue 

8.26:  Does  not  reject  Army.NumJammers  >  Army. Squadrons 

Condition  I:(Duration  >  0) 
Condition  II: 

{3B,B  <E  {l...NArmy[true]}, 

Army[true,  i?].Num Jammers  >  Army[true,  B). Squadrons) V 
(3B,B  €  {l...NArmy[false]}, 

Army[false,  J3].Num Jammers  >  Army[false,  B]. Squadrons) 

Condition  IILTrue 

8.27:Does  not  reject  Army.NumProcess  >  Army. Squadrons 

Condition  I:(Duration  >  0) 
Condition  II: 

(3B,B  G  |l...NArmy[true]}, 

Armyftrue,  5].NumProcess  >  Army  [true,  B].  Squadrons)  V 
(3B,B  e  {l...NArmy[false]}, 

Army[false,  Bj.NumProcess  >  Armyffalse,  B]. Squadrons) 

Condition  IILTrue 

8.28:  Does  not  reject  Army.NumReceive  >  Army. Squadrons 

Condition  I:(Duration  >  0) 
Condition  II: 

{3B,B  €  {l...NArmy[true]}, 

Armyftrue,  Bj.NumReceive  >  Armyftrue,  B}. Squadrons) V 
(3B,B  E  {l...NArmy[false]}, 

Armyffalse,  Bj.NumReceive  >  Armyffalse,  B]. Squadrons) 

Condition  IILTrue 
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8.29:  Does  not  reject  Army.NumSend  >  Army.Squadrons 

Condition  I:(Duration  >  0) 
Condition  II: 

(3B,B  €  {l...NArmy[true]}, 

Army[true,  Bj.NumSend  >  Army  [true,  B].  Squadrons)  V 
(3B,B6  {l...NArmy[false]}, 

Army[false,  £?].NumSend  >  Army[false,  B]. Squadrons) 

Condition  III:True 

8.30:  Does  not  reject  Cmsgs.msg.NumFixers  > 
Cmsgs.msg.  Squadrons 
Condition  I: 

3B,        B  e  {true, false}, 
(3/,l  <f<  NArmy[£], 

(3m,  m  G  {l...NCmsgs[JB]},A/imp(JB,/,m,  Duration))) 

Condition  II: 

Cmsgs[i?,  mj.msg.NumFixers  >  Cmsgs[5,  m].msg. Squadrons 

Condition  IILTrue 

8.31:  Does  not  reject  Cmsgs.msg. NumJammers  > 
Cmsgs.msg. Squadrons 

Condition  I: 

35,        B  e  {true, false), 
(3/,l  <  /  <  NArmy[fi], 

(3m, m  e  {l...NCmsgs[i?]},Mimp(i?,/,m,  Duration))) 

Condition  II: 

Cmsgs[i?,  mj.msg. NumJammers  >  Cmsgs[i?,  mj.msg. Squadrons 

Condition  III:True 


92 


8.32:  Does  not  reject  Cmsgs.msg.NumProcess  > 
Cmsgs.msg.  Squadrons 

Condition  I: 

3B,        B  e  {true, false}, 
(3/,l  <f<  NArmy[£], 

(3m,  m  e  {l...NCmsgs[B]},Mz'mp(JB,/,m,  Duration))) 

Condition  II: 

Cmsgs[J9,  mj.msg. NumProcess  >  Cmsgs[i3,  mj.msg. Squadrons 
Condition  IILTrue 

8.33:  Does  not  reject  Cmsgs.msg. NumReceive  > 
Cmsgs.msg. Squadrons 
Condition  I: 

3B,        B  €  {true, false}, 
(3/,l  <  /  <  NArmy[5], 

(3m,  m  G  {l...NCmsgs[j9]},Mzmp(i?,/,m,  Duration))) 

Condition  II: 

Cmsgs[B,  mj.msg. NumReceive  >  Cmsgs[i?,  mj.msg. Squadrons 

Condition  IILTrue 

8.34:  Does  not  reject  Cmsgs.msg. NumSend  > 
Cmsgs.msg. Squadrons 
Condition  I: 

35,        B  e  {true, false}, 
(3/,l  <f<  NArmy[B], 

(3m,  m  G  {l...NCmsgs[i?]},A/imp(i?,/,m,  Duration))) 

Condition  II: 

Cmsgs[B,m].msg. NumSend  >  Cmsgs[i?,  mj.msg. Squadrons 

Condition  III:True 
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8.36:  Divide  by  zero  in  CalcContrast 

Condition  I: 

Active(B,  g)  A  Active(->B,  e)A 

3_7, 1  <j<  Avmy[B,  g\. Squadrons,  Endurance(B,  <7,j,  Mainloop)  >  OA 
3k,  1  <  k  <  Army[->j5,  e]. Squadrons,  Endurance^  B,e,  fc,  Mainloop)  >  OA 
BigEnough(B,g,j,  e,  k,  Mainloop)  A  Clear(B,g,j,  e,  k,  Mainloop) 

Condition  II: 

(X,B,e)fe(Mamloop)  =  0  V  Params.IX  =  0)  A  Params.IC  =  OA 
(KB,U(Mainloop)  =  0  V  Params.IY  =  0)A 
(Params.IAltFactor  =  0V 

i4/^(A'-,5)e)it(Mainloop),  ^^^^(Mainloop))  =  Params.IMeanAlt)A 
Params.ISlopeFactor  =  0 

Condition  III:True 

8.37:  Divide  by  zero  in  CalcAngle 

Condition  I:Active(B,g)  A  Active(->B,  e) 
Condition  II: 

3j,  1  <  j  <  Army[5, g}. Squadrons,  Endurance(B,g,j,  Mainloop)  >  OA 
3k,  1  <  k  <  Army[-i5,  e]. Squadrons,  Endurance{->B,  e,  k,  Mainloop)  >  OA 
(XBi5J(Mainloop)  =  A^B,e,*(Mainloop)  -  Amaj2g2e^3uadw^v 
AB>5'J(Mainloop)  =  A_B,e^(Mainloop)  +  Army^g'e]2SquadWidth) 

Condition  III:True 

8.38:   Missing  equal-y  case  in  FindAngle 

Condition  I:Active(B,g)  A  Active{-*B,  e) 
Condition  II: 

3j,  1  <  j  <  Army[£, #]. Squadrons,  Endurance(B,g,j,  Mainloop)  >  OA 
3k,  1  <  fc  <  Army[-«5,  e]. Squadrons,  Endurance(->B,  e,  k,  Mainloop)  >  OA 

(YB,5J(Mainloop)  =  KB,e,,(Mainloop)  -  Army[^.e].SqUadLen?thv 
^■(Mainloop)  =  K,B,eifc(Mainloop)  +  AnnyhI^u.dLenffth) 

Condition  IILTrue 
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8.40:   Out-of-Bounds  array  reference  in  FindPoints 
Condition  I: 

Active(B,  g)  A  Active(->B,  e)A 

3j,  1  <  j  <  Army [B,^]. Squadrons,  Endurance(B, g, j,  Mainloop)  >  OA 

3A-,  1  <  A;  <  Army[-iJ3,  e]. Squadrons,  Endurance{->B,  e,  fc,  Mainloop)  >  OA 
BigEnough(B,g,j,e,  k,  Mainloop) 

Condition  II:Params.SampleRate  >  51 
Condition  III:True 

8.41:  Divide  by  zero  in  Height 
Condition  I: 

Active(B,  g)  A  Activ e(->i?,  e)  A  Params.SampleRate  >  1 A 
3j,  1  <  j  <  Army[B,^]. Squadrons,  Endurance(B ,  g ,  j ,  Mainloop)  >  OA 
3/:,  1  <  k  <  Army[->5,  ej. Squadrons,  Endurance(-*B,  e,  fc,  Mainloop)  >  OA 
BigEnough(B,g,j,  e,  fc,  Mainloop) 

Condition  II: 

^B,g,j( Mainloop)  =  X-.g^fc (Mainloop)  A  1b,5)J (Mainloop)  =  Y-,B,e,k{ Mainloop) 
Condition  III:True 

8.42:  Divide  by  zero  in  Altitude 

Condition  I:Active(B,g) 

Condition  II:Params.XDelta  =  0  V  Params.YDelta  =  0 

Condition  IILTrue 

8.44:  Divide  by  zero  in  CalcBI 
Condition  I: 

Active(B,  g)  A  Active(-*B,  e)A 

3j,  1  <  j  <  Army[i?,  <jr]. Squadrons,  Endurance(B,g,j,  Mainloop)  >  OA 
3k,  1  <  fc  <  Army[-iB,  e]. Squadrons,  Endurance(-iB,  e,  /:,  Mainloop)  >  OA 
BigEnough(B,  g,j,  e,  A:,  Mainloop) 

Condition  II:Params.IMeanAlt  =  0 
Condition  III:True 
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8.45:  Divide  by  zero  in  WeatherMove Effect 

Condition  I:Adive(B,g) 

Condition  ILParams.WMaxSeverity  =  0  V  Params.NumWEvents  =  0 

Condition  IILTrue 

8.46:  Divide  by  zero  in  WObsEffect 
Condition  I: 

Active(B,  g)  A  Active(->B,  e)  A  Params.SampleRate  >  2A 
3j,  1  <  j  <  Army[5,  g]. Squadrons,  Endurance(B,g,  j,  Mainloop)  >  OA 
3k, I  <  k  <  Army[->i?,  e]. Squadrons,  £Wurance(-ii?,e,  A;,  Mainloop)  >  OA 
BigEnough(B,  g,j,  e,  k,  Mainloop) 

Condition  ILParams.WMaxSeverity  =  0  V  Params.NumWEvents  =  0 
Condition  IILTrue 

8.48:  Divide  by  zero  in  UpdateK 

Condition  I: 

Active{B,g)  A  Params.NumWTypes  >  OA 

3w,\  <  w  <  Params.NumWTypes,  NurnWeapon(B,g,  w,  Mainloop)  >  OA 

3i,  1  <  i <  NumWeapon(B,g,w,  Mainloop), 

azB,s,u,,,(Mainloop)  ^  ooA  aygi5)UM(Mainloop)  ^  oo 

Condition  II: Army[5,^].Weapon[tf]. Radius  =  0 
Condition  IILTrue 

8.50:   Divide  by  zero  in  CalcRDelay 
Condition  I: 

Active(B,  g)  A  Active(->B,  e)A 

(NCmsgs[£]  >  OA 

3m,  1  <  m  <  NCmsgs[i?],  Mimp(B,g,m,  Duration))V 

(Active(B,  /)  A  Army[5,  /]. Report  =  gA 

3t,Q<t  <  Duration-  RepT(B,f,g),SomeObserve(B,f,t)) 

Condition  II:Army[->5,e].ComJamRadius  =  0 
Condition  IILTrue 
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